Snort mailing list archives
RE: ACID Portscan Traffic (0%)
From: "Slighter, Tim" <tslighter () itc nrcs usda gov>
Date: Wed, 11 Dec 2002 09:16:03 -0700
As stupid as this might sound...did you set the variable for snort spp_portscan log file in the acid_conf.php file ? -----Original Message----- From: Gary Borgeson [mailto:gborgeson () aecc com] Sent: Wednesday, December 11, 2002 8:22 AM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] ACID Portscan Traffic (0%) On the ACID main page we have Traffic Profile by Protocol including Portscan Traffic. This % has stayed at 0 since day one. Even when I launch my own scan it stays at 0%. There is plenty of stuff in portscan.log. How should I interpret this? Thanks, G
Current thread:
- ACID Portscan Traffic (0%) Gary Borgeson (Dec 11)
- <Possible follow-ups>
- RE: ACID Portscan Traffic (0%) Slighter, Tim (Dec 11)
- RE: ACID Portscan Traffic (0%) Hicks, John (Dec 11)
- RE: ACID Portscan Traffic (0%) Luo, Philip (Dec 11)
- RE: ACID Portscan Traffic (0%) Robby Desmond (Dec 17)
- RE: ACID Portscan Traffic (0%) Pacheco, Michael F. (Dec 11)
- RE: ACID Portscan Traffic (0%) Chris Eidem (Dec 11)
- RE: ACID Portscan Traffic (0%) Slighter, Tim (Dec 12)
- RE: ACID Portscan Traffic (0%) Morgan, Joel (Macon State College) (Dec 17)
- RES: ACID Portscan Traffic (0%) Coelho (Dec 17)