BASE 1.2.7 (karen) doesn't log any PortScan trafic from outside to my IP address, when I scan somebodys IP, I see this in PostScan section.
TCP, UDP, ICMP monitors works well
Snort version: snort-mysql (2.3.2-3)
BASE does not log anything, Snort does. Are you sure that Snort is detecting it?
>Are you sure that Snort is detecting it?
I'm not sure :( how could I check this?
I can simulate scan to my IP from outside machine.
Your snort is not configured to log port scans, all you need is to "locate snort.conf" and then edit it with your favourite text editor. If locate won't find anything, run updatedb and try again.
Log in to post a comment.