Snort mailing list archives
RE: Portscan log
From: francisv () dagupan com
Date: Sat, 14 Sep 2002 08:22:38 +0800
Ahh... there we go. Thanks Jon. My ACID interface is on another computer, I guess I need to copy it over to be able to see the portscans. -----Original Message----- From: Jon Quiros [mailto:jquiros () teahead net] Sent: Saturday, September 14, 2002 5:33 AM To: snort-users () lists sourceforge net Subject: Re: [Snort-users] Portscan log Goldmoon wrote:
Hi, I do I set up Mysql to log all snort data and see it ACID? Anyone know? I've tried the online docs, and they are very confusing.
try the docs included in your distributions. from acid_conf.php: /* Snort spp_portscan log file */ $portscan_file = "/var/log/snort/portscan.log"; ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Portscan log francisv (Sep 12)
- Re: Portscan log John Sage (Sep 13)
- Re: Portscan log Goldmoon (Sep 13)
- Re: Portscan log Jon Quiros (Sep 13)
- Re: Portscan log Goldmoon (Sep 13)
- <Possible follow-ups>
- RE: Portscan log francisv (Sep 13)
- RE: Portscan log francisv (Sep 13)
- Re: Portscan log John Sage (Sep 13)