Snort mailing list archives

SMTP Not Logged


From: David Porter <dporter () mbox com au>
Date: Mon, 12 Jan 2004 22:04:38 +0800

Hello,

I am very new to Snort and have installed it in sensor mode.  It is 
detecting alerts okay and subsequently logging the relevant packets.

I am seeing matches for an SMTP rule (below) however, the packets 
relevant to this rule are never logged.  

SID  663  
Message  SMTP rcpt to sed command attempt 

I am using Snort snort-2.0.4-1 and logging packets to a local file in 
binary.

Any suggestions appreciated.

Thank you,



 

---------------------------------------------------------------------
Want an SMS alert to your mobile phone when your email arrives?
Now you can! http://www.mbox.com.au/smsservice.html


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: