scan file

[Clayton Mascarenhas <masclaythesnort () yahoo com>]

Hi list,

Could somebody please explain to me what that "scan" file is all about?? Every time I run snort, it gets generated 
together with a file named "alert".... but only sometimes ... when there is a portscan attack I guess ... will that 
scan file actually have anyting in it. I know the alerts get sent to that file named "alert" . But where is the file 
for all the triggered rules that just need to log information and do not need to be sent to the "alert" file. Is this 
"scan" file that "log" file?? Or is there another file somewhere called "log". What is this scan file?? How does it get 
generated? And when does it get filled? Thanks snort-users list.

Clayton Mascarenhas



---------------------------------
Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, and more