[Snort-users] scan file

From: Clayton Mascarenhas <masclaythesnort(at)yahoo.com>
Date: Fri Feb 28 2003 - 16:56:25 EST

Hi list,

Could somebody please explain to me what that "scan" file is all about?? Every time I run snort, it gets generated together with a file named "alert".... but only sometimes ... when there is a portscan attack I guess ... will that scan file actually have anyting in it. I know the alerts get sent to that file named "alert" . But where is the file for all the triggered rules that just need to log information and do not need to be sent to the "alert" file. Is this "scan" file that "log" file?? Or is there another file somewhere called "log". What is this scan file?? How does it get generated? And when does it get filled? Thanks snort-users list.

Clayton Mascarenhas

---

Do you Yahoo!?
Yahoo! Tax Center - forms, calculators, tips, and more

---

This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven.
http://thinkgeek.com/sf

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Fri Feb 28 17:42:33 2003