Re: snort 2.6 not logging icmp messages

[Joel Esler <joel.esler () sourcefire com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Do you have your ICMP rules turned on in your snort.conf?

J

teknet () poczta onet pl wrote:
> Hello
>
> I moved from snort 2.4.3 to 2.6.0. I copied configuration file along with all rules files.
> New snort works fine except one thing: it does not log any icmp alerts any more (only tcp and udp). Why ? I looked in 
> the logs but did not find any interesting.
>
> Thanx
>
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

- --
+---------------------------------------------------------------------+
Joel Esler           Senior Security Consultant         1-706-627-2101
Sourcefire    Security for the /Real/ World -- http://www.sourcefire.com
Snort - Open Source Network IPS/IDS -- http://www.snort.org
GPG Key http://demo.sourcefire.com/jesler.pgp.key
+---------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEmTCKKbCSyXHckt4RAhYRAJ9bRCaAOwH1+oY8A7Am1tZGDpAF+ACgmNMb
IzUj4z4AlTvmmmq1HET/WNQ=
=j5uA
-----END PGP SIGNATURE-----


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users