Snort mailing list archives

Re: Snort_stat.pl wierdness


From: Skip Carter <skip () taygeta com>
Date: Thu, 01 Nov 2001 15:12:10 -0800



Ok, after puttering with this for a while, I thought I'd see if anyone has any
insight on this wierdness.  It's damned odd, since this works just fine on the
same box using snort 1.7 and an older version of snort_stat.



The log begins from:   ::
The log ends     at:   ::
Total events: 0
Signatures recorded: 0
Source IP recorded: 0
Destination IP recorded: 0

[...snip...]


All of the stats show _nothing_.  No alerts or anything.  But--In the testme

   This happens to me when I run snort (1.8.1) with the '-e' option (I
   was using  '-Ddeo'), it works properly when I turn that option off
   ( '-Ddo' ).


-- 
 Dr. Everett (Skip) Carter      Phone: 831-641-0645 FAX:  831-641-0647
 Taygeta Scientific Inc.        INTERNET: skip () taygeta com
 1340 Munras Ave., Suite 314    WWW: http://www.taygeta.com
 Monterey, CA. 93940            












_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: