Am 2005-02-13 14:49:18, schrieb J�rg B�hnke: > Hi List, > # cat /var/log/auth.log | /usr/sbin/snort-stat > > But this shows: > # Subject: [SNORT] oggi > # daily report > # > # The log begins from: :: > # The log ends at: :: > # Total events: 0 > # Signatures recorded: 0 > # Source IP recorded: 0 > # Destination IP recorded: 0 > # > #... > > Does this mean that no report was made? > What has to be done to run snort?
At me, 'snort' has send me every day a report via E-Mail but it looks like yours... 'snort' in WOODY is crap. If you like to use WOODY (me too), get the "snort" sources from SID and compile it for WOODY. They are working fine. Greetings Michelle -- Linux-User #280138 with the Linux Counter, http://counter.li.org/ Michelle Konzack Apt. 917 ICQ #328449886 50, rue de Soultz MSM LinuxMichi 0033/3/88452356 67100 Strasbourg/France IRC #Debian (irc.icq.com)
signature.pgp
Description: Digital signature
