ACID Portsacan Trafic

["Alireza Naderi" <alireza () panaisp net>]

Hi guys

I have a problem with ACID
I know for Portscan Trafic,i shuold configure acid_conf.php
and i should set the "$portscan_file" variable.
but i want to know wich log file is refer to portscan_file
Realy, snort make 2 log files : scan.log and alert
I set that variable with scan.log "$portscan_file=/var/log/snort/scan.log"
but it is not working and still Portsacn Traffic=0%

Does it should make another log file for portscan? how i configure it?
do you think i have miss configurations?

Thanx in advance
Alireza





-------------------------------------------------------
This sf.net email is sponsored by:
With Great Power, Comes Great Responsibility 
Learn to use your power at OSDN's High Performance Computing Channel
http://hpc.devchannel.org/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users