Snort mailing list archives
ACID Reporting and Portscans
From: "Joe Giles" <jgiles () joeman1 com>
Date: 6 Aug 2002 16:07:38 -0000
Probobly a simple setup issue, but I cant get any data from ACID's Portscan Traffic. I get data from my portscan preprocessor. I can generate a file /var/log/snort/portscan.log (Owned by root) and the file is working, and I have it set up in the acid_conf.php file, I have $portscan_file = "/var/log/snort/portscan.log"; set. But, Im not ever getting any port scan traffic. I can see different port scan information in the logs, but isnt it supposed to generate portscan spicific info? Thanks Joe Giles jgiles () joeman1 com AOL ID: mcigiles ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ACID Reporting and Portscans Joe Giles (Aug 06)
- <Possible follow-ups>
- RE: ACID Reporting and Portscans Cloppert, Michael (Aug 06)
- RE: ACID Reporting and Portscans Joe Giles (Aug 06)