Snort queries

[Justin Xavier <Justin.Xavier () Cybertech Com>]

Hi All,

We are using Netgate Pfsense firewall in our premises with Snort service installed. We had some queries regarding the 
service and need your assistance in understanding SNORT.


1.      We observed SNORT logs and found many log entries for snort events. Is it that SNORT is blocking/dropping all 
these packets?

2.      When does SNORT decide to block traffic from a particular IP? This is regarding the Blocked hosts.

3.      How can we determine the blocked hosts from snort logs, as we couldn’t find a specific log entry that stated 
the ip was blocked and added to Blocked hosts.

Regards,
Justin X.

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

        To unsubscribe, send an email to:
        snort-users-leave () lists snort org

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette