Snort mailing list archives
PortScan Configuration in snort.conf
From: Ruiyuan Jiang <Ruiyuan_Jiang () liz com>
Date: Wed, 19 May 2004 08:22:30 -0400
Hi, all I upgraded my snort from 2.0.5 to 2.1.2 (mysql, php, apache, ACID). After upgrade, I don't see port scan traffic anymore in "Traffic Profile by Protocol". I looked at the snort.conf from 2.1.2 distribution and there is no more portscan.log item anymore. I enabled flow-portscan in snort.conf but there is definition for the log location. I don't see portscan traffic. Am I doing something wrong? Thanks. Ryan Jiang
Current thread:
- PortScan Configuration in snort.conf Ruiyuan Jiang (May 19)
- RE: PortScan Configuration in snort.conf Michael Steele (May 19)
- <Possible follow-ups>
- RE: PortScan Configuration in snort.conf Ruiyuan Jiang (May 19)