Re: First time snorting ... ERROR: The dynamic detection library ...

[Alan McKay <alan.mckay () gmail com>]

On Thu, Nov 14, 2013 at 7:41 PM, waldo kitty <wkitty42 () windstream net> wrote:
> ok... try adding "-k none" before your "-c" or after your "eth0"...

I did that and still no luck - still empty pcap files

> now we need to see the rest of the output when you shut down snort... that will
> give us the statistics of traffic that it has seen, if any at all...

I've updated this with the shutdown info.   While it was running I did
a couple of "nmap -O" against it from another machine on the internet
(my home server) and also did an infinite loop trying to ssh into it
and kept getting repeated errors about publickey ... so both of those
should have triggered something no?

https://docs.google.com/document/d/1bd3atMiqTBvbwF8BIpZDSVEr1vYniyM0GSIHZGvVWO8/edit?usp=sharing


-- 
“Don't eat anything you've ever seen advertised on TV”
         - Michael Pollan, author of "In Defense of Food"

------------------------------------------------------------------------------
DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
Free app hosting. Or install the open source package on any LAMP server.
Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!