Post subject: sfportscan not logging to mysql Posted: May 11, 2008 - 10:00 AM
Joined: May 11, 2008
I have a W2K3 server setup.
My sfportscan fills up my portscan.log fine.
All other alerts get logged to mysql database.
So far so good.
Exept my sfportscans don't fill my mysql database.
In other words the iphdr table gets filled but not with ip_proto=255 entries.
snort.conf (relevant part):
var HOME_NET IP 192.168.233.130
var EXTERNAL_NET !$HOME_NET