Snort mailing list archives
RE: ids problems
From: "Guillaume Arcas" <guillaume.arcas () free fr>
Date: Thu, 22 Apr 2004 09:59:28 +0200 (CEST)
Jasmine CHUA a dit :
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thanks for your reply. I have tried that before. But it still does not work. :(
If you want flow-portscans alerts to be logged in your database, you have to adjust the settings of your database output plugin (in snort.conf). Here's a usefull link about how snort distinguishes - and uses - log and alert facilities : http://www.theadamsfamily.net/~erek/snort/logging_methods.txt -- Guillaume Arcas -------------------------------------------------- Il faut nous quitter. Nous sommes deux enfants, nous avons fait une folie. (Yvonne de Galais) ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- ids problems Jasmine CHUA (Apr 21)
- Re: ids problems Guillaume Arcas (Apr 22)
- <Possible follow-ups>
- RE: ids problems Jasmine CHUA (Apr 22)
- RE: ids problems Guillaume Arcas (Apr 22)
- RE: ids problems Jasmine CHUA (Apr 22)
- RE: ids problems Guillaume Arcas (Apr 22)