Snort mailing list archives

Re: SNMP bug for SNORT v 1.9 ???


From: Doan Nguyen <doan_group () yahoo com>
Date: Fri, 24 Jan 2003 05:39:30 -0800 (PST)


Twig,
my original purpose was to have SNORT send traps to my network manager for any rules that SNORT detects.  The problem 
here is that I think SNORT is suppose to send only 1 trap per an incident, instead it is continuously sending the same 
traps for that 1 incident which I do not think is correct.
-Doan
 twig les <twigles () yahoo com> wrote:Try disabling the rule that alerts on snmp traps :)


--- Doan Nguyen wrote:

Hi all,

I've been playing around with SNORT version 1.9 with
SNMP support. I current configured my SNORT to send
SNMP trap events to my HP OpenView box. I triggered
an alarm by port scanning my SNORT box. One would
think that 1 or a few traps sent to HP OpenView
would be enough, but SNORT seems to be stuck in a
infinate loop and just hammers my HP box with
endless numbers of traps. Has anyone run into this
issue?? Thanks

-Doan



---------------------------------
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now


=====
-----------------------------------------------------------
Know yourself and know your enemy and you will never fear defeat. 
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


---------------------------------
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now

Current thread: