Am 2005-02-13 14:49:18, schrieb Jörg Böhnke:
> Hi List,
> # cat /var/log/auth.log | /usr/sbin/snort-stat
>
> But this shows:
> # Subject: [SNORT] oggi
> # daily report
> #
> # The log begins from: ::
> # The log ends at: ::
> # Total events: 0
> # Signatures recorded: 0
> # Source IP recorded: 0
> # Destination IP recorded: 0
> #
> #...
>
> Does this mean that no report was made?
> What has to be done to run snort?
At me, 'snort' has send me every day a report via E-Mail
but it looks like yours... 'snort' in WOODY is crap.
If you like to use WOODY (me too), get the "snort" sources
from SID and compile it for WOODY. They are working fine.
Greetings
Michelle
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSM LinuxMichi
0033/3/88452356 67100 Strasbourg/France IRC #Debian (irc.icq.com)
Attachment:
signature.pgp
Description: Digital signature