Re: Snort Problems -- access etc

[Gene R Gomez <gene () gomezbrothers com>]

Hi Tim!
I'd suspect an IP conflict; another host on the network may be sharing 
the IP you assigned to your box.
If you try to connect to these ports from the host where they're running 
(isolating the network, hopefully), what happens?

Gene R Gomez

Timothy A. Holmes wrote:

> I am on the trail of a puzzle here:
>
> I have a FC4 box running SNORT, and the associated processes (httpd,
> mysql, etc) to keep it happy.
>
> It is monitoring on one port which is outside our firewall, and is
> talking to the inside on another port.
>
> At times, everything seems happy happy, but other times, I try to hit
> the box, and cannot get in either via http, or via ssh, the requests
> keep timing out
>
> I fed it the uptime command and all of the load averages came back as
> 0.00,  
>
> The box is a Pentium 4, 2.0 HT with one gig of memory and a 40 gig hard
> drive
>
> I could sure use some help tracking this down,  I cannot rely on SNORT
> till I can get these access problems resolved.
>
> I am also interested in using this as a learning tool for diagnosing
> this type of problems in the future, so if you can include thoughts on
> strategy etc that would be greatly appreciated.
>  


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users