On Thu, Nov 28, 2002 at 10:19:24 -0600, Hanasaki JiJi wrote: > Snort is reporting scans in the alert.log but not the portscan.log
Which version? AFAIK the version in woody still has wrong log rotation causing it to log to a file descriptor corresponding to an already deleted file (#158042). HTH, Ray -- A Microsoft Certified System Engineer is to information technology as a McDonalds Certified Food Specialist is to the culinary arts. Michael Bacarella commenting on the limited value of certification.