Snort mailing list archives

Re: Snort 2.0 isn't alerting


From: John Sage <jsage () finchhaven com>
Date: Sun, 27 Apr 2003 16:31:27 -0700

On or about Sat, Apr 26, 2003 at 03:37:44PM -0500, Lloyd_Ardoin () mazzios com posited:
Just an FYI ....I had submitted a question a couple of days ago about 
upgrading from Snort 1.9.1 to 2.0.0 and wasn't getting any alerts anymore 
on a RedHat 8.0 Dell box. I have gone back to the 1.9.1 version and I am 
seeing the exploit traffic again on my DMZ.

Given that you presented little to no useful background regarding your
new 2.0.0 configuration, it's not surprising that no one was able to
help you.

Should you decide to progress to 2.0.0 at a later date, more detail
beyond "...I upgraded to the 2.0.0 version on April 23rd and I am no
longer getting any alerts..." would be a good starting point toward
your receiving actual help from the list.

Just a thought...


- John
-- 
"You are in a twisty maze of weblogs, all alike."

    PGP key: http://www.finchhaven.com/pages/gpg_pubkey.html
Fingerprint: C493 9F26 05A9 6497 9800 4EF6 5FC8 F23D 35A4 F705


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: