Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » Linux » Testing Snort IDS

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Testing Snort IDS


Posted by REB_ElMagnifico on October 14, 2006 16:05:10

I recently installed Snort for Linux and want to trigger some alerts and logging. I have tried doing port scanning with NMAP, but it didn't trigger any alerts.

Does anyone have any suggestions on how I can set off my own IDS?

I am using the latest rules from the site.

Thanks in advance.

Ryan

Posted by duh on October 16, 2006 06:24:27

Nessus is the easiest way (large amount of alerts in a shorter amount of time). Otherwise Metasploit can help you do a small number of alerts.
site feedback | Terms of Use | Privacy Policy | forum archives ©2007 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.