Re: Help Snort

["Bruno Gimenes Pereti" <pereti () ump edu br>]

Hello Fernando,

First, write in portuguese to our portuguese list. Words from Alex to the
list last year:

There is a snort list in Brazil, in portuguese.
To subscribe, snort-subscribe () yahoogroups com

Thanks.
Alex

Now, you need to give us more information about what you are doing. What is
your command line? Is your NIC in promiscue mode (does you receve a message
in console or syslog saying entering in promiscue mode) ?
Snort usually alerts only when you receive packet that he consider offencive
(part of a attack), maybe it didn't alert because you didn't received any
known packet.

Please subscribe to our brasilian list, I prefer to write in portuguese :)

PS: another thing, use plain text when you write to a mailing list.

T+

Bruno Pereti.



----- Original Message -----
From: Fernando
To: snort-users () lists sourceforge net
Sent: Tuesday, January 15, 2002 9:51 AM
Subject: [Snort-users] Help Snort


in portuguese
Galera, eu estou utilizando o snort, porem eu o coloco em minha rede e
coloco no snort.conf para analisar a rede 172.16.1.0/24 ou seja a rede
inteira porem ele nao pega nada, so me mostra algo qdo eu pingo a placa de
rede dele ou qdo eu faco o contrario dele eu pingo outra maquina, e nao e
isto q eu queria, eu gostaria q ele ficasse ouvindo a rede inteira, ou
melhor q qdo eu pingasse de uma estacao outra estacao ele pegasse e logasse.
Valeu.

in English
Guys, im using the snort, so i put my network 172.16.1.0/24 in the HOME_NET
but my snort dont do nothing, dont log anything, i dont know what happen.
And i want that snort been stay listening all my network or that ping that
one station another station the snort server make a log this ping. Please
Help me. I dont know to do. Thanks

Fernando Faustino


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users