Snort mailing list archives

Re: SNORT has stopped alerting


From: Y M <snort () outlook com>
Date: Wed, 16 Jul 2014 18:39:14 +0000

If more information is provided, you will get a better help:
1. Which output plugin are you using in your snort.conf (syslog, unified2, etc..)?2. Where are you outputting the 
alerts (directory, database, barnyard2)?3. What is the final destination of the alerts (database, binary, text)?
4. How are you viewing the alert data (console, GUI)?5. What are the rules/rules files included in snort.conf?
If this was double posted, I blame the browser!
YMFrom: robert.farnsworth () hp com
To: snort-users () lists sourceforge net
Date: Wed, 16 Jul 2014 17:45:26 +0000
Subject: [Snort-users] SNORT has stopped alerting









I have stopped receiving ALERTs from snort, I have checked and yes it is running, any troubleshooting tips would be 
appreciated.





------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!                                        
  
------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: