RE: not logging portscans

["McCammon, Keith" <Keith.McCammon () eadvancemed com>]

Are you sure that it is set up correctly with a promiscuous interface, on a monitoring port?  Is it detecting attacks 
for other hosts within the home network?

-----Original Message-----
From: Fage Martin [mailto:MARTIN.FAGE () northampton ac uk]
Sent: Thursday, May 23, 2002 8:48 AM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] not logging portscans


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello
Snort doesnt seem to detect any portscanning activity except when
directly scanning snort
machine!
Any ideas?
        Thanks



-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPOzk5oM7OF/nbs7zEQJnyACfbuucvZZ8WdxKJjSYlX0lZwjhe4MAoPtF
khS+ePmh0zVGPxBG/3nmFbbE
=HX1T
-----END PGP SIGNATURE-----

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users