Snort 2.8.5.3 pkg v. 1.21 not detecting portscans



  • I am having a problem with snort not recognizing portscans done from an outside source.  They are not being blocked, detected, or logged.



  • @LostInIgnorance:

    I am having a problem with snort not recognizing portscans done from an outside source.  They are not being blocked, detected, or logged.

    Check to see if snort is running.

    ps -aux | grep snort.

    If your on nanobsd snort will kill it self if you load to many rules.

    Error out of swap space….....

    Make sure you are listening on the wan if you want to see portscans and attacks that get blocked by the firewall.

    James


Log in to reply