Re: SNORT not adding entries to snort/portscan ???

[Hanasaki JiJi <hanasaki@hanaden.com>]

1.8.4-Beta1 Build 91

It also seems to be dying without any reports to syslog

J.H.M. Dassen (Ray) wrote:
> On Thu, Nov 28, 2002 at 10:19:24 -0600, Hanasaki JiJi wrote:
>
> > Snort is reporting scans in the alert.log but not the portscan.log
>
>
> Which version? AFAIK the version in woody still has wrong log rotation
> causing it to log to a file descriptor corresponding to an already deleted
> file (#158042).
>
> HTH,
> Ray

--
=================================================================
= Management is doing things right; leadership is doing the     =
=       right things.    - Peter Drucker                        =
=_______________________________________________________________=
=     http://www.sun.com/service/sunps/jdc/javacenter.pdf       =
=  www.sun.com | www.javasoft.com | http://wwws.sun.com/sunone  =
=================================================================