Snort
[Top] [All Lists]

[Snort-users] No alerts attacking with nmap

To: "SNORT" <snort-users@lists.sourceforge.net>
Subject: [Snort-users] No alerts attacking with nmap
From: "Josep Pujadas i Jubany" <josep@bellera.cat>
Date: Wed, 28 Mar 2007 10:19:57 +0200
Delivered-to: sp-com-lists@consult.net
Delivered-to: snort-list@securepoint.com
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=snort-users>
List-help: <mailto:snort-users-request@lists.sourceforge.net?subject=help>
List-id: "Snort users talk about... Snort!" <snort-users.lists.sourceforge.net>
List-post: <mailto:snort-users@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/snort-users>, <mailto:snort-users-request@lists.sourceforge.net?subject=unsubscribe>
Sender: snort-users-bounces@lists.sourceforge.net
Hello!

I have trouble adjusting my snort.conf ...

I attacked the snort sensor from another machine on my LAN, using nmap, and 
any alert is showed.

snort is working (I have some UDP and ICMP alerts) ...

I'm running it on a FreeBSD 6.2 machine:

# pkg_info | grep snort
oinkmaster-2.0      Help you update your snort rules after each update
snort-2.6.1.3       Lightweight network intrusion detection system

Any idea for my problem ?

Where can I find good examples for configuring/adjusting snort.conf ?

Thanks in advance,

Josep Pujadas 

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

<Prev in Thread] Current Thread [Next in Thread>