Snorby Portscan Detection Failiure

["Davison, Charles Robert" <cdaviso1 () vols utk edu>]

Good Morning,


I have configured my port-scan preprocessor as follows:


[cid:1835172e-441f-49b3-b0eb-88c02254e7e2]


I run nmap against this box and nothing gets displayed in Snorby? I did make sure that my unified 2 output is getting 
piped over to Snorby, but so far i only see my ICMP test rule I created and no port-scan detection... is there 
something I am missing?

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!