hi Saul,

have you check the rules , pre-processor ,output plugin ? and after your
have configure the configuration , push the configuration to the sensor.
and before you start your sensor please be sure that your configuration is
not empty , by pressing preview.

i've met the problem that u face. at the time , i was forgot to apply the
rules , and only apply empty conf.

hth,
--thony--

-----Original Message-----
From: Dane Howard [mailto:Gr8Dane2bellsouth.net]
Sent: 19 Januari 2003 23:13
To: 'Saúl Bósquez'; 'Snort User Groups'
Subject: RE: [Snort-users] acid console issue

I don't think you will show any sensors until you actually generate some
alerts. Acid pulls the sensors from the alerts it gets and since you
have no alerts, Acid doesn't know you have any sensors. Try to trip
some alerts to each sensor.

Dane

-----Original Message-----
From: snort-users-adminlists.sourceforge.net
[mailto:snort-users-adminlists.sourceforge.net] On Behalf Of Saúl
Bósquez
Sent: Friday, January 17, 2003 5:48 PM
To: Snort User Groups
Subject: [Snort-users] acid console issue

Im running the snortcenter console on my db box, and i select view
sensors
and i get the "sensor running" message in green and a Pid# 1862 ...
I went to the sensor box and wrote "ps -u root" to see my process list
and i
got a #1862 process named snort.. so that means that the sensor is up a
running but in the ACID console i get 0 sensors..

Sensors: 0
Unique Alerts: 0 ( 0 categories )
Total Number of Alerts: 0

-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com - A 128-bit supercerts
will
allow you to extend the highest allowed 128 bit encryption to all your
clients even if they use browsers that are limited to 40 bit encryption.

Get a guide
here:http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0030en
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------
This SF.NET email is sponsored by: FREE SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]