Koozali.org: home of the SME Server

snort/acid questions

Time

snort/acid questions
« on: May 11, 2002, 09:32:58 PM »
I'm running SME V5.1.2

Installation using Ari's How-To went well and the system is running. But I do have a few config/usage questions.

1) Have been to the cert website but still having trouble getting portscan to show up in acid...anything new on this front?

2) How do I get snort to scan and report on my "interior" IP (nic). Only shows readings from the external IP (nic)? Only lists one sensor.

3) Wonder why UDP is always zero? Is this normal?


Thank you