Re: Snort is too quiet!

["Guillaume" <guillaume () anteria fr>]

> Hi ,
>
> Now I can see some TCP alerts in ACID (about 57%) but all of them
> have the same destination address!
> I've already set my NIC to pormisc mode it should see everything
> going on in my network right? (or I might misunderstand
> somrthing).
> Any suggestion?

Are you on a switched lan ?

Guillaume

[ Sent with SquirrelMail -  http://www.squirrelmail.org     ]



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users