Snort

Hi all,

  Is it possible to launch pulledpork in offline mode?? My IDS doesn't 
have access to Internet, but I can put vrt and emerging rules in a 
directory on this server. Can pulledpork read .tar.gz files from 
directory and then process all rules??

Thanks.
-- 
CL Martinez
carlopmart {at} gmail {d0t} com

Howdi,

Snort is running 2.9.0.4 on Ubuntu, no errors all seems to work fine.
the sfpscanner is enabled, but if i scan the snort server with nessus, i didn´t get any alerts in the /var/log/snort/alert.

if i run snort from commandline with -v i can see a lot of packages incomming.

if i start snort it tells me "0 preprocessors loadet", the same on a VM-Maschine with the equal setup, but there it detecs everything.
same Config file all :/

and the preprocessors are enabled with the compiling, and in the config file.

where to look next ?

thanks




---
freenetMail - Der zuverlässige E-Mail-Dienst von freenet.de
Jetzt http://mail.freenet.de/produkte/basic/index.html?pid=10111947018 mit 1 GB Speicher und Profi-Spamschutz sichern!