Re: Acid Not Logging

[Roelof JT Jonkman <roel () SiliconDefense com>]

Agpiah,

> I have scanned the box Snort is running on with Nmap
> and not a flicker.

spp_portscan is hardwired to generate alerts, you have two options
on the database plugin log and alert, I'll bet you with pretty
good odds that your database plugin is configured to 'log'.

Authorative (Marty) answers on logging vs. alerts:

http://www.theadamsfamily.net/~erek/snort/logging_methods.txt

(And thanks to Erek for putting this up.)

                roel


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users