Snort mailing list archives

Re: Snort, php, MySQL and acid showing no activity


From: Erek Adams <erek () theadamsfamily net>
Date: Fri, 23 Aug 2002 13:11:16 -0700 (PDT)

On Fri, 23 Aug 2002, Joshua Rogers wrote:

Ok, I ran 'nmap -v -sS -O <server ip>' on the snort machine and on another
server. Both tests did not show up in the acid console and nothing in the
MySQL db. There is also nothing showing up in the portscan log file. I am
guessing I missed something in the setup.


Hrm...  Sounds like a config issue with snort.

Try this:

        *  Verify that snort is working.  'snort -vade' should show traffic on
your network.
        *  Check your snort.conf.  Check HOME_NET and EXTERNAL_NET, to be sure
they are set for the correct ranges.
        *  If the MySQL host and snort host are different, make sure you can
connect from one to the other.

Hope that helps!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: