RE: No portscan still on ACID

[James Chong <james_cwy () yahoo com>]

I am a bit frustrated after doing this and still no
port scan.I do not know what is wrong.I have done:

1. Configured snort.etc
var HOME_NET
202.185.109.165/32,202.185.109.170/32,202.185.109.171/32,202.185.109.172/32

preprocessor portscan: $HOME_NET 4 3
/var/log/snort/portscan.log
(Is portscan.log created automatically or must I
create a blank one?)

2. Changed it to alert:
output database: alert, mysql, ...

3. Changed acid_conf.php
/* Snort spp_portscan log file */
$portscan_file = "/var/log/snort/portscan.log";

I tried port scanning using LanGuard 2.0 and nmapwin
1.3.1. But still there is no portscan.log file and
data.

Am I missing something here?

Hope someone can advise.
Thanks for the help.Appreciate it
James

__________________________________
Do you Yahoo!?
Yahoo! Search - Find what you’re looking for faster
http://search.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users