Help with rules

["Marcelo Zabani" <wine14 () hotmail com>]

Hi guys, sorry if this question is stupid... I'm new to snort...
how can I decode my logs using rules? I ran "snort -i eth1 -l logs -p"
ps: eth1 is internet in my computer, and eth0 is lan
after I did this, I ran nmap -O myip (not localhost), to see what snort 
showed up... but when I enter the logs directory and then my IP, I can't 
find info about TCP/IP fingerprinting, how do I apply snort rules to a log 
file? I guess this is the problem... I'm using Slackware 9, if this can 
help... oh and by the way I can't find my snort installation directory, nor 
the rules archives... I compiled the source, is there any problem?

Thank You
Marcelo Zabani

_________________________________________________________________
MSN Hotmail, o maior webmail do Brasil.  http://www.hotmail.com



-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users