Re: Snort config question

[Ryan Russell <ryan () securityfocus com>]

On Sun, 3 Feb 2002, Chris W. wrote:

> System #1
>
> OS: Windows XP Pro
> Snort 1.8.2
> MySql
> Acid

Does System #1 pick up everything it should?

> System #2
>
> OS: Windows XP Pro
> Snort 1.8.2
> ZoneAlarm
> BlackIce

You're in unknown territory by running multiple IDS/firewall products on
the same box.  It's entriely possible that BlackICE is getting the
packets first, and blocking them.  In order to see if Snort is failing,
you'll have to temporarily uninstall the other two products.

                                                Ryan


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users