|
我在Slackware下安装完成Snort_inline,通过下面的命令运行snort_inline:
snort_inline -c /etc/snort_inline/snort_inline.conf -Q -N -l /var/log/snort_inline/ \
-t /var/log/snort_inline/ -v
启动后的提示信息如下:
+-----------------------[suppression]------------------------------------------
| none
-------------------------------------------------------------------------------
Rule application order: ->activation->dynamic->drop->sdrop->reject->rejectboth->rejectsrc->rejectdst->alert->pass->log
Log directory = /var/log/snort_inline/
--== Initialization Complete ==--
,,_ -*> Snort_Inline! <*-
o" )~ Version 2.4.5 (Build 29)
'''' By Martin Roesch & The Snort Team: http://www.snort.org/team.html
(C) Copyright 1998-2005 Sourcefire Inc., et al.
Snort_Inline Mod by William Metcalf, Victor Julien, Nick Rogness,
Dave Remien, Rob McMillen and Jed Haile
NOTE: Snort's default output has changed in version 2.4.1!
The default logging mode is now PCAP, use "-K ascii" to activate
the old default logging mode.
我不知道这算不算运行成功啊? 为什么就是无法抓包啊 ? |
|