Snort Forums Archive

Archive Home » Linux » No TCP alerts

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

No TCP alerts

Posted by pero on November 02, 2006 03:15:18

Hi,
my snort can't log any TCP alert, only ICMP and UDP. What is the problem?

Posted by duh on November 02, 2006 10:28:04

Try the -k command line option.

Posted by pero on November 02, 2006 20:52:32

Thanks,
when I type ' -k none ' I get only TCP alerts, but no UDP and ICMP.
Also no alerts define in local.rules!?

Posted by pero on November 02, 2006 21:06:37

Thanks,
when I type ' -k none ' I get only TCP alerts, but no UDP and ICMP.
Also no alerts define in local.rules!?

Posted by akeeton on November 08, 2006 07:19:57

You need to recompile with -fno-strict-aliasing. It's a known problem with version <= 2.6.0.2. Alternatively, install 2.6.1 (under prereleases).

Posted by pero on November 08, 2006 21:40:40

Thanks, it's OK now!