please help: snort + woody
Hi List,
I just installed debian woody on a blank harddisk.
I tried to install the minimum number of packages.
i choosed snort and required packages.
during startup i find Starting Netwok Intrusion Detection System: Snort eth0
Promiscuous mode enabled
so I expect to find any protocol trying this:
# cat /var/log/auth.log | /usr/sbin/snort-stat
But this shows:
# Subject: [SNORT] oggi
# daily report
#
# The log begins from: ::
# The log ends at: ::
# Total events: 0
# Signatures recorded: 0
# Source IP recorded: 0
# Destination IP recorded: 0
#
#...
Does this mean that no report was made?
What has to be done to run snort?
Reply to: