Snort mailing list archives
outgoing traffic question
From: "Guillermo Padilla" <gpadilla () cbct com>
Date: Tue, 1 Mar 2005 16:09:26 -0500
I've just recently installed snort on my network and I'm still trying to figure out what exactly I'm looking at on the ACID page. Right now I'm more interested in seeing what traffic is going out of my network, eg: url, and ports being accessed. When I click on destination ip address I see some of the ips that I've been trying to access within my network. But if don't see any ips/url for any sites I've gone outside my network. I do see a .255 ip which I think is tells me that an outside url/ip was accessed. Any ideas as where I should look in my configs to be able to view the type of info I'm trying to see? Thanks. -guillermo
Current thread:
- outgoing traffic question Guillermo Padilla (Mar 01)