OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Snort-users] ACID v0.9.6b24, spp_portscan2 and spp_portscan

From: Richard Pesce (RPesceco.amador.ca.us)
Date: Tue Jan 13 2004 - 14:39:33 CST


This should help
http://www.theadamsfamily.net/~erek/snort/logging_methods.txt

>>> Michael Scheidell <scheidell> 01/13/04 12:25PM >>>
>
> This may insult you, but when you declare your output method are you
> outputting alerts?

no insult taken.. I still have a bitch about portscan logging...

if you set it as log' it doesn't alert.

if you set it as alert, it doesn't log...

-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users