I am running 2.2 beta3 and I never have any IDS logs visible in the GUI. If I
go to the filesystem, I only see root ssh logins in /var/log/snort/alert, while
the actual port scans seem to appear in
/var/log/snort/ppp0/snort.log.XXXXXXXXXX, where Xs are numbers. I am using a
PPPoE fiber connection and ppp0 is the red interface if that makes any
difference. I already added my oink code from www.snort.org.
Thanks,
-Michael
____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now.
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user
