do not show error and any log in snort ( no log , no error , run completely )

0 投票
最新提问 用户: (120 分)

i install latest version of snort and rules from on windows server 2012 R2 with Kiwi syslog (solarwinds) .

i configure snort.conf with my data and everything i think is ok , (No error)

first i try to send(output) log to kiwi with this command in configure file :

output alert_syslog: host=, LOG_AUTH LOG_ALERT

and nothing happens

then try with this command

output alert_fast: alerts.ids

again nothing happens

i run snort with two different command

snort -A console -i1 -c c:\Snort\etc\snort.conf -l c:\Snort\log -K ascii

snort -i1 -s -l c:\snort\log\ -c c:\snort\etc\snort.conf

what is my problem ?

this is link my configuration file ( snort.conf )

if you need i can upload file any where you wants.

登录 或者 注册 后回答这个问题。

欢迎来到 Security Q&A ,有什么不懂的可以尽管在这里提问,你将会收到社区其他成员的回答。