Snort mailing list archives

Snort not working in a multi hub environment?


From: Devdas Bhagat <devdas () worldgatein net>
Date: Tue, 10 Jul 2001 17:11:01 +0530

I finally got 1.8 up and running. 
I have three machines (including mine) directly connected to a hub, and
the rest of the LAN connects to the same hub through a single cable from
another hub.

Snort detects portscans (nmap) from my machine to the other two in the
hub perfectly well. However, scans to the rest of the network are
ignored.

I have correctly defined HOME_NET (a /24 network).

Any ideas on why it doesn't log?

Devdas Bhagat 
--
Eat drink and be merry!  Tommorrow you may be in Utah.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: