RE: Port scan not being logged? at 0 %?

["M Shirk" <shirkdog_linux () hotmail com>]

The Port scan on the first page in ACID is looking for a file with port 
scanning activity. You have to setup Snort to log the port scanning activity 
with the Portscan Detector

http://www.snort.org/docs/writing_rules/chap2.html#tth_sEc2.4.2


Shirkdog


> From: "RD R" <careergeek () hotmail com>
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Port scan not being logged?  at 0 %?
> Date: Tue, 28 Sep 2004 19:52:31 -0400

_________________________________________________________________
On the road to retirement? Check out MSN Life Events for advice on how to 
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement
> --- Begin Message ---
>
>
> From: "RD R" <careergeek () hotmail com>
>
> Date: Tue, 28 Sep 2004 19:52:31 -0400
>
> <<< text/html: EXCLUDED >>>
>
> --- End Message ---