RE: Snort with Acid : Network

["Wirth, Jeff" <WirthJe () dnb com>]

From: j [mailto:jai.s () net4india net]

> Hi,
>
> I have configured snort with mysql, acid. successfully in linux box.
>
> In the configuration i have specified 
>
>   var HOME_NET x.x.x.x/22
>   var EXTERNAL_NET any   
>
> Now the problem, after running snort  for past 1 week... i am seeing
details only of that ip address where snort is installed.
> and i didn't find any detail of other machines which are in network.
>
> I have done portscan from one machine to another machine, the snort machine
which is in same network didn't detect.
> is it something more i have to  do ??? ,
> if yes...wht it should be , snice its large network...

What type of network layer device are you plugged into?? Sounds like you
have snort plugged into a switch. Which would explain why you are only
seeing traffic to/from the snort box.


- Jeff


-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users