Snort mailing list archives
Where is $portscan_file log file ????
From: "Dhruv Chandra" <dhruvc () hotmail com>
Date: Wed, 11 Dec 2002 14:46:22 -0500
HiThanks for the info as to where the variable is. But I am unable to find where the Portscan Log file is :(.
Is it created by default when snort is run or is there a special switch one needs to use ??
Please help .. Thanks a ton. Cheers Dhruv
From: "Hicks, John" <JHicks () JUSTICE GC CA>To: 'Gary Borgeson' <gborgeson () aecc com>, "Snort Users (E-mail)" <snort-users () lists sourceforge net>Subject: RE: [Snort-users] ACID Portscan Traffic (0%) Date: Wed, 11 Dec 2002 11:12:41 -0500 From the config doc (http://www.andrew.cmu.edu/~rdanyliw/snort/acid_config.html) [OPTIONAL for Snort portscan pre-processor support] $portscan_file : full path to a Snort portscan log file set this in acid.conf. hth, John Hicks hth, John Hicks -----Original Message----- From: Gary Borgeson [mailto:gborgeson () aecc com] Sent: Wednesday, December 11, 2002 10:22 AM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] ACID Portscan Traffic (0%)On the ACID main page we have Traffic Profile by Protocol including PortscanTraffic. This % has stayed at 0 since day one. Even when I launch my own scan it stays at 0%. There is plenty of stuff in portscan.log. How should I interpret this? Thanks, G ------------------------------------------------------- This sf.net email is sponsored by: With Great Power, Comes Great Responsibility Learn to use your power at OSDN's High Performance Computing Channel http://hpc.devchannel.org/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
_________________________________________________________________The new MSN 8: smart spam protection and 2 months FREE* http://join.msn.com/?page=features/junkmail
------------------------------------------------------- This sf.net email is sponsored by:With Great Power, Comes Great Responsibility Learn to use your power at OSDN's High Performance Computing Channel
http://hpc.devchannel.org/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Where is $portscan_file log file ???? Dhruv Chandra (Dec 11)