From: Kaushal S. <kau...@gm...> - 2010-03-23 11:51:35
|
Hi, snort on ossim. 1)I did port mirrroring 2)run ossim-setup and in sensor configuration select those interfaces in listening mode (With port mirroring configured) 3) After running ossim-setup, it ran ossim-reconfig and restarted all the services. I have configured the email address also. just wanted to understand about "where do i look for any intrusion which occurs and captured by snort/ossim" ? Please suggest/guide. Thanks and Regards, Kaushal |