Snort mailing list archives
Re: snort
From: "Richard Lichvar" <rlichvar () sainc com>
Date: Wed, 26 Aug 2009 10:48:05 -0400
I recently thought I was having the same issue - lot's of zero-length alert files and BASE had nothing in it. Turns out the application system is so minor and isolated that it rarely sees any activity for Snort to address! I can tell you one thing that will generate Snort transactions for sure: run a Nessus scan against one of the systems Snort is protecting. That should generate entries from even the default Snort rules. Hope this helps a little bit. RichLich -----Original Message----- From: Kaushal Shriyan [mailto:kaushalshriyan () gmail com] Sent: Wednesday, August 26, 2009 5:42 AM To: snort-users () lists sourceforge net Subject: [Snort-users] snort Hi I dont see alert file being populated by snort. I have chmod it to 777. still it doesnot log. Any ideas ? Thanks and Regards, Kaushal ------------------------------------------------------------------------ ------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort Kaushal Shriyan (Aug 26)
- Re: snort Richard Lichvar (Aug 26)