no UDP

["Denis Romanov" <romanovd () co kern ca us>]

Hello,

I am running snort-1.8.4 on a RH 7.2, libpcap 0.7.1, tcpdump-3.7.1 with ACID and MySQL. eth1 is on a public side 
(hooked up to a hub).
command used:

/usr/local/bin/snort -i eth1 -c /usr/local/snort/snort.conf -D -l /usr/local/snort/log

eth1 is brought up by:
ifconfig eth1 promisc up
with no IP assigned.

I can see alerts coming from the TCP and ICMP side, but no UDP packets. Has anyone observed the similar situation?

Thanks in advance,
Denis


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users