Snort dont detect P2P traffic
-
Hello together,
since several weeks, I started to work with snort, set it up and frequently checking the alerts. My Suppress-list and the blocking list become a bit of size. So on one other pfSenses that I'm working with snort on, I became aware of Messages for some kind of P2P File sharing Software named Kazaa. So I want to recreate this message on my "main" pfSense with Snort, for… I don't know, to see if it works and or not. I used uTorrent and BitTorrent and loaded some random Torrents and the Logs stay empty. My pfSense is on Version 2.6.0-RELEASE, Snort is on version 4.1.6. I installed all Rules except the Emerging Threats Open Rules. I also enabled all P2P Rules that are exsisting. So what can I do to detect this traffic?
Thank you!
Greetings!
