Hanasaki JiJi wrote:

Snort is reporting scans in the alert.log but not the portscan.log


Any thoughts?

Hi!
Now I *have* my snort reporting scans in the portscan.log in Version 1.8.4-beta1 (Build 91). Because of this message, I started playing with my snort.conf. When I uncommented the rules at the end of the snort.conf (except shellcodes.rules), snort started reporting in that file.
If you wish, I can send you my snort.conf.
Bye (and I sorry for my english, it is not good enough) :-)
Alfonso




Reply via email to