Re: Snort on proxy (outbound alerts)

[Balasubramaniam Natarajan <bala150985 () gmail com>]

On Fri, Jan 18, 2013 at 4:29 AM, Thibaud Raso <joga3.web () gmail com> wrote:

> Hi everybody,
>
> I'm having a problem with my running instance of Snort which is setup on
> my proxy server(squid), and uses the ET ruleset.
> I've been looking for a solution for a while, but I still have no answer.
> My problem is, that for some rules, it alerts me on outbound traffic
> instead of inbound traffic, let me explain:
Could you let us know the number of interface on your proxy server ?

Which interface are you making snort listen on ?

Which interface is your proxy listening on ?

-- 
Regards,
Balasubramaniam Natarajan
www.blog.etutorshop.com

------------------------------------------------------------------------------
Master HTML5, CSS3, ASP.NET, MVC, AJAX, Knockout.js, Web API and
much more. Get web development skills now with LearnDevNow -
350+ hours of step-by-step video tutorials by Microsoft MVPs and experts.
SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122812

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!