Snort mailing list archives

Re: ACID v0.9.6b24, spp_portscan2 and spp_portscan


From: "Richard Pesce" <RPesce () co amador ca us>
Date: Tue, 13 Jan 2004 12:39:33 -0800

This should help
http://www.theadamsfamily.net/~erek/snort/logging_methods.txt


Michael Scheidell <scheidell@> 01/13/04 12:25PM >>>

This may insult you, but when you declare your output method are you
outputting alerts?

no insult taken.. I still have a bitch about portscan logging...

if you set it as log' it doesn't alert.

if you set it as alert, it doesn't log...



-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: