hi i have installed snort using easyids...
has got two nics...eth0 and eth1..
but its not detecting ne portscan as well as tcp alerts...
can neone tell me whats the problem...is there nethin wrong in my snort.conf file..

Let me give you an example of how difficult, or impossible, it is to respond to your brief, vague question:

"My car doesn't run when I get in. I'm using the correct key. Can somone tell me the whats wrong?"

Please, we're blind out here, and need you to be our eyes, and feed us real data, real logs, real output.

welcome to my world, I'm the developer of EasyIDS and see these vague questions on a daily basis. Have you read any of the documentation?

Quick Install Guide
Complete Setup Guide

Deep breath... relax... breath... deep breaths. Ahhh...

hehe, it's all good.

hey ..this is not the way to ask more details..u guys may be great in linux but dat doesnot mean you will treat guys like us like this...
i have been using this forum for quiet a long time but had never got such replies...

instead of this you could have told me abt wat all details i should post..so dat if possible you guys can help me out..
m still not clear wat more details i should give...
i have installed easyids and its detecting all other alerts except the portscan alerts...
under sfportscan also in snort.conf file i have checked everything but it seems to be all right...

can neone tell me wats the problem...or wat more details i should paste here to make me more elaborate..


and reagaring logs..i don know whether MR.C knows nething abt easyids or not...
if i would have been gettin portscan alerts den there would have been no need of posting my question here..
m not gettin ne logs ....