problem with Snort

vahid_p · 02-14-2007, 07:17 AM

Dear All ,

i install snort on FC5 according to this document :

internetsecurityguru.com/documents/
for monitoring i use BASE . but all of the counters in BASE are Zero and dont change . i used NMAP for port scanning , but the counters was still zero .

what is the problem ?

i will be grateful for your guide .

Capt_Caveman · 03-04-2007, 10:48 AM

Is Snort itself seeing packets? Is their anything in the Snort logs (/var/log/snort/)? Did you modify Snort's config file for your network?