Snort mailing list archives

RE: Port scans not showing up in ACID.


From: "John Creegan" <jcreegan () questarweb com>
Date: Thu, 05 Feb 2004 08:07:50 -0600

It's not ACID.  I'm seeing them here.  I'd be happy to go over the
differences in our configurations if you like.

"Michael Steele" <michaels () winsnort com> 02/04/04 06:59PM >>>
I believe it to be problem with ACID. I wish it was being actively
developed. It seems the programmer has been absent for some time, but
I
think he is still around, just busy doing other projects. It's free so
we
can't expect too much :)

Maybe someone else could patch it?

Kindest regards, 

The WINSNORT.com Management Team
-- 
Pick up your FREE Windows or UNIX Snort installation guides       
mailto:support () winsnort com 
Website: http://www.winsnort.com 
Snort: Open Source Network IDS - http://www.snort.org 



-----Original Message-----
From: snort-users-admin () lists sourceforge net [mailto:snort-users-
admin () lists sourceforge net] On Behalf Of Peters, Michael D.
Sent: Wednesday, February 04, 2004 7:19 AM
To: Snort-Users@Lists. Sourceforge. Net (E-mail)
Subject: [Snort-users] Port scans not showing up in ACID.

I have portscan traffic identified in my logs but I don't have it
registered
in the ACID %meter on the home page. I'm working with the current
snort
2.1.0 snapshot. Is there some threshold parameter of some
configuration
that
will help display this portscan activity?

Best regards,

Michael D. Peters



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net 
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users 
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users 





-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn 
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net 
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users 
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


This message (including any attachments) contains confidential 
information intended for a specific individual and purpose, 
and is protected by law.  If you are not the intended recipient,
you should delete this message and are hereby notified that any 
disclosure,copying, or distribution of this message, or the taking 
of any action based on it, is strictly prohibited.



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: