Snort mailing list archives
RE: Whee! Snort is Working! (...Damn, SnortSnarf Is n't.)
From: "Robinson, Eric R." <erobinson () dot state nv us>
Date: Fri, 15 Mar 2002 11:56:04 -0800
Oops. I see the problem. Somehow, snortsnarf.pl got turned into a zero-byte file. It's not doing anything! -----Original Message----- From: Robinson, Eric R. [mailto:erobinson () dot state nv us] Sent: Friday, March 15, 2002 11:48 AM To: snort-users () lists sourceforge net Subject: [Snort-users] Whee! Snort is Working! (...Damn, SnortSnarf Isn't.) I just installed Snort and SnortSnarf for Windows using Micahel Steele's very detailed instructions at www.silicondefense.com. Snort is running as a service, and is generating alerts. I ran a port scan and some other tests against the snort machine, and I can see files and folders being created under c:\inetpub\wwwroot\logs, and the alert.ids file is getting updated. However, when I run snortsnarf using the command given in the instructions, which is: c:\snort\snortsnarf\snortsnarf.pl -d c:\inetpub\wwwroot\logs -dns -db c:\snort\snortsnarf\ann-dir\annotation-base.xml -cgidir http://localhost\cgi c:\inetpub\wwwroot\logs\alert.ids The index.html file does not change. What's up with that? _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: Whee! Snort is Working! (...Damn, SnortSnarf Is n't.) Robinson, Eric R. (Mar 15)