tag:blogger.com,1999:blog-16506996.post112731744985692000..comments2024-02-08T01:57:07.944-07:00Comments on The Digital Voice: The Snort/Visual Studio ExperimentJohn Wardhttp://www.blogger.com/profile/10741149622435353727noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-16506996.post-29979298849421668392009-12-25T04:02:00.675-07:002009-12-25T04:02:00.675-07:00Thank you for sharing. Even though im not into vis...Thank you for sharing. Even though im not into visual or any microsoft products, still i can have some knowledge regarding this.e-learninghttp://www.kalliance.com/noreply@blogger.comtag:blogger.com,1999:blog-16506996.post-1132719797394745162005-11-22T21:23:00.000-07:002005-11-22T21:23:00.000-07:00Using the -l switch will log to pcap files, it wil...Using the -l switch will log to pcap files, it will not display alerts on the console. If you want to see the alerts, try "snort -i <interface number> -N -A console". Then you will alerts on the console.John Wardhttps://www.blogger.com/profile/10741149622435353727noreply@blogger.comtag:blogger.com,1999:blog-16506996.post-1130573334283443432005-10-29T02:08:00.000-06:002005-10-29T02:08:00.000-06:00Y IAMNOT GETTING ANY ALERTS??SOME ONE PLEEZ HELP.....Y IAMNOT GETTING ANY ALERTS??<BR/>SOME ONE PLEEZ HELP...Anonymousnoreply@blogger.comtag:blogger.com,1999:blog-16506996.post-1130573211648398942005-10-29T02:06:00.000-06:002005-10-29T02:06:00.000-06:00IAM NOT GETTING ANY ALERTS IN SNORT.THIS IS THE CO...IAM NOT GETTING ANY ALERTS IN SNORT.THIS IS THE COMMAND GIVEN BY ME....PLEEEEEZ HELP<BR/>TNX IN ADVANCE,,,,<BR/>C:\Snort\etc>content -i 3 -l c:\snort\log<BR/>Running in packet logging mode<BR/>Log directory = c:\snort\log<BR/><BR/>Initializing Network Interface \Device\NPF_{FB2A9862-CED9-4B98-9A96-24BE416D6F92<BR/>}<BR/><BR/> --== Initializing Snort ==--<BR/>Initializing Output Plugins!<BR/>Decoding Ethernet on interface \Device\NPF_{FB2A9862-CED9-4B98-9A96-24BE416D6F92<BR/>}<BR/><BR/> --== Initialization Complete ==--<BR/><BR/> ,,_ -*> Snort! <*-<BR/> o" )~ Version 2.4.3-ODBC-MySQL-FlexRESP-WIN32 (Build 26)<BR/> '''' By Martin Roesch & The Snort Team: http://www.snort.org/team.html<BR/> (C) Copyright 1998-2005 Sourcefire Inc., et al.<BR/> NOTE: Snort's default output has changed in version 2.4.1!<BR/> The default logging mode is now PCAP, use "-K ascii" to activate<BR/> the old default logging mode.<BR/><BR/><BR/><BR/>===============================================================================<BR/><BR/>Snort received 65300 packets<BR/> Analyzed: 65300(100.000%)<BR/> Dropped: 0(0.000%)<BR/>===============================================================================<BR/>Breakdown by protocol:<BR/> TCP: 58529 (89.631%)<BR/> UDP: 2598 (3.979%)<BR/> ICMP: 386 (0.591%)<BR/> ARP: 909 (1.392%)<BR/> EAPOL: 0 (0.000%)<BR/> IPv6: 0 (0.000%)<BR/>ETHLOOP: 1 (0.002%)<BR/> IPX: 0 (0.000%)<BR/> FRAG: 0 (0.000%)<BR/> OTHER: 2879 (4.409%)<BR/>DISCARD: 0 (0.000%)<BR/>===============================================================================<BR/>Action Stats:<BR/>ALERTS: 0<BR/>LOGGED: 65314<BR/>PASSED: 0<BR/>===============================================================================<BR/>Snort exiting<BR/>HAVE CHECKED ALL OPTIONS.Anonymousnoreply@blogger.com