basic use

["Stefano" <s_colombo () iol it>]

Hi all ,
   just a newbie question to start.
   I got the snort 1.7 and idscenter 1.08d up and running.
   But I'm very new of this and I have some questions.

   My intent , using snort , is to monitor the net for possible attacks as
netbus, orifice etc.
   Do I need some particular rules ? I've donloaded from snort.org the
latest tar file with all the rules and I've loaded them all.

   Then I start the snort on my portable and to now I've only seen ICMP
redirects alerts.
   Should I see all the traffic ?
  Thanks


Stefano Colombo
################################




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users