In snort I can see informations about Portscan from my Red,Orange,Green IP.
Does it mean that somebody hacked my servers or it is snort mistake?
*Date:* 08/29 03:27:57 *Name:* Portscan detected from 192.168.1.20
Talker(fixed: 30 sliding: 29) Scanner(fixed: 0 sliding: 0)
*Priority:* n/a *Type:* n/a
*IP info:* n/a:n/a -> n/a:n/a
*References:* none found *SID:* n/a
From: Les & Belinda Moyle <lmct@ii...> - 2007-09-09 09:28:29
Have just installed ipcop 1.4.16 and am having trouble updating snort.
Am receiving the following message:
/usr/local/bin/oinkmaster.pl: Error: the output directory
"/etc/snort/rules" isn't writable by you.
Oink oink. Exiting...
Can someone assist?
From: Chris Marr <chris@co...> - 2007-09-09 11:13:53
On Sun, 09 Sep 2007 9:28:35 pm Les & Belinda Moyle wrote:
> Have just installed ipcop 1.4.16 and am having trouble updating snort.
> Am receiving the following message:
> Loading /var/ipcop/snort/oinkmaster.conf
> /usr/local/bin/oinkmaster.pl: Error: the output directory
> "/etc/snort/rules" isn't writable by you.
> Oink oink. Exiting...
> Can someone assist?
I had this problem and fixed it by changing the permissions
on /etc/snort/rules to -rw-rw-r--