Snort mailing list archives

ACID Reporting and Portscans


From: "Joe Giles" <jgiles () joeman1 com>
Date: 6 Aug 2002 16:07:38 -0000

Probobly a simple setup issue, but I cant get any data from ACID's Portscan Traffic. I get data from my portscan 
preprocessor. I can generate a file /var/log/snort/portscan.log (Owned by root) and the file is working, and I have it 
set up in the acid_conf.php file, I have $portscan_file = "/var/log/snort/portscan.log"; set. But, Im not ever getting 
any port scan traffic. I can see different port scan information in the logs, but isnt it supposed to generate portscan 
spicific info?

Thanks

Joe Giles
jgiles () joeman1 com
AOL ID: mcigiles


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: