Re: Snort is too quiet!

["Guillaume" <guillaume () anteria fr>]

> Hi,
>
> Now I remove -l option and snort starts to catch something( thank
> you!thank you!) but only ICMP packet!!!!
> Is this typically normal ??

Well... it is not typically anormal !! :-)

> I also checked  the /var/log/snort it also has the same ICMP
> alert and no TCP or UDP .
> Forgive me but I'm really new to snort..I have to ask the same
> question again; What did I miss?

What's in your snort.conf file ?

Guillaume

[ Sent with SquirrelMail -  http://www.squirrelmail.org     ]



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users