Re: Woody Snort alerts records portscans but not in portscan.log
On Wed, Oct 09, 2002 at 13:06:16 -0500, Hanasaki JiJi wrote:
> Any thoughts on why portscans are showing up in the alert log but not the
> portscan log?
Woody's snort packages don't do log rotation right, causing snort to end up
logging some information to a file descriptor for a deleted file (i.e.
not logging that information to a file). See #158042, #159456.
HTH,
Ray
--
The "free" in "free software" refers to freedom, not price; specifically,
that all computer users should have the freedom to study, change, and
redistribute the software that they use.
RMS in http://weblog.mercurycenter.com/ejournal/stories/storyReader$664
Reply to: