Snort mailing list archives

AW: Snort not Log


From: "Poppi, Sandro" <Sandro.Poppi () wacker com>
Date: Wed, 15 May 2002 07:31:29 +0200

Luigi,
 
if I understand you right snort works now but not the way you want. To help
you solve this issue too we need more information like I said before
including your snort.conf.
 
Ciao,
Sandro

-----Ursprüngliche Nachricht-----
Von: D'Amato Luigi [mailto:luigidamato77 () yahoo it]
Gesendet: Dienstag, 14. Mai 2002 18:05
An: snort-users () lists sourceforge net
Betreff: Re: [Snort-users] Snort not Log



Thanks a lot for your answer. I've got a snort 1..8.6 working on a slackware
8.0 with a network ethernet, I tried to do a lan scan through the IP
192.168.0.1 but I see no result in the log files, every external attack is
logged 

Thanks a lot and kind regards


----- Original Message ----- 
From: Poppi, Sandro <mailto:Sandro.Poppi () wacker com>  
To: 'D'Amato  <mailto:luigidamato77 () yahoo it> Luigi' ;
snort-users () lists sourceforge net <mailto:snort-users () lists sourceforge net>

Sent: Tuesday, May 14, 2002 12:26 PM
Subject: AW: [Snort-users] Snort not Log

You should use 
 
var HOME_NET [192.168.1.0/24]
 
If that doesn't help please send more information like which snort version,
os, how you test snort.

HTH,
Sandro

-----Ursprüngliche Nachricht-----
Von: D'Amato Luigi [ mailto:luigidamato77 () yahoo it
<mailto:luigidamato77 () yahoo it> ]
Gesendet: Montag, 13. Mai 2002 23:06
An: snort-users () lists sourceforge net
<mailto:snort-users () lists sourceforge net> 
Betreff: [Snort-users] Snort not Log


I'm a new snort user, I set up the Home net "variabile" with my lan's range
IP, but the snort doesn't notice intrusions.Would it be possible to get more
informations about this matter?

I have setting in the snort.conf the variable:

var HOME_NET 192.168.1.0/24



Thanks a lot and kind regards








Current thread: