snort pytanko
hail
od niecalego tygodnia zamiast roznych ciekawych informacji na temat
intrudersów SNORT przysyła mi wyłącznie coś takiego:
Events between :: and ::
Total events: 0
Signatures recorded: 0
Source IP recorded: 0
Destination IP recorded: 0
Events from same host to same destination using same method
=========================================================================
# of from to method
=========================================================================
Percentage and number of events from a host to a destination
============================================================
% # of from to
============================================================
Percentage and number of events from one host to any with same method
==============================================================
% # of from method
==============================================================
Percentage and number of events to one certain host
=================================================================
% # of to method
=================================================================
The distribution of event methods
===============================================
% # of method
===============================================
Raczej jestem pewien ze nic nie ruszalem, oststnio wiecej gram niz adminuje
i nie zauwazylem kiedy to sie dokladnie stalo.. pewnie po jakims updejcie
czy cos.. jak przywrocic mu dawna sprawnosc? pliki conf. wygladaja dobrze -
jak juz pisalem - nic nie bylo ruszane :(
pozdrawiam
Mako
Reply to: