Snort mailing list archives

Re: snort


From: "Richard Lichvar" <rlichvar () sainc com>
Date: Wed, 26 Aug 2009 10:48:05 -0400

I recently thought I was having the same issue - lot's of zero-length
alert files and BASE had nothing in it. Turns out the application system
is so minor and isolated that it rarely sees any activity for Snort to
address!

I can tell you one thing that will generate Snort transactions for sure:
run a Nessus scan against one of the systems Snort is protecting. That
should generate entries from even the default Snort rules.

Hope this helps a little bit.

RichLich

-----Original Message-----
From: Kaushal Shriyan [mailto:kaushalshriyan () gmail com] 
Sent: Wednesday, August 26, 2009 5:42 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] snort

Hi

I dont see alert file being populated by snort. I have chmod  it to
777. still it doesnot log.

Any ideas ?

Thanks and Regards,

Kaushal

------------------------------------------------------------------------
------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008
30-Day 
trial. Simplify your report design, integration and deployment - and
focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: