hi guys,
I've tried editing the rules in /etc/snort/rules/local.rules by adding in new
rules.
Appearantly from the honeywall "menu" - "status" - "snort alert" I could see my
alert generated.
However, walleye doesn't seems to be able to generate that.
Is there something that I'm missing out? Or where does walleye draw out those
alerts from?
Regards,
Steve
_________________________________________________________________
Get your free suite of Windows Live services today!
http://www.get.live.com/wl/all
_______________________________________________
Honeywall mailing list
[email protected]
https://public.honeynet.org/mailman/listinfo/honeywall