Snort mailing list archives
Re: ACID and portscan reporting
From: roman () danyliw com
Date: Tue, 16 Oct 2001 00:05:12 US/Eastern
The database plugin probably has not been configured correctly to support portscans. See Question #B-7 of the ACID FAQ: http://acidlab.sourceforge.net/acid_faq.html Roman
On Wed, 19 Sep 2001, Lists wrote:I see that port scans are being logged to alert.ids, yet nothing shows up in ACID under portscans. All of the rules seem to be working fine. I am sure this is probably something simple that I am overlooking. Anybody? Ben
Keepper --------------------------------------------- This message was sent using Voicenet WebMail. http://www.voicenet.com/webmail/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: ACID and portscan reporting roman (Oct 15)
- <Possible follow-ups>
- RE: ACID and portscan reporting Karen Marino (Oct 16)
- RE: ACID and portscan reporting Roman Danyliw (Oct 16)