Snort mailing list archives
Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan
From: "Richard Pesce" <RPesce () co amador ca us>
Date: Tue, 13 Jan 2004 12:39:33 -0800
This should help http://www.theadamsfamily.net/~erek/snort/logging_methods.txt
Michael Scheidell <scheidell@> 01/13/04 12:25PM >>>This may insult you, but when you declare your output method are you outputting alerts?
no insult taken.. I still have a bitch about portscan logging... if you set it as log' it doesn't alert. if you set it as alert, it doesn't log... ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
- <Possible follow-ups>
- Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)
- Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan Richard Pesce (Jan 13)