sukko@blackstar src $ rm -f log.txt && sudo ./NetVMSnort -t 1> /dev/null Logging to standard error [00:32:18/log_setup] --- Log started at Wed, 13 Dec 2006 00:32:18 +0100 --- [00:32:18/config_read] Opening configuration file "/home/sukko/gurtdoc/tesi/NetVMPositif/rules/snort.conf" [00:32:18/nvm_setup] Setting up NetVM... [00:32:18/pe_ethernet_config] Initing Ethernet PE... [00:32:18/pe_ethernet_config] done! [00:32:18/pe_ipv4_config] Initing IP PE... [00:32:18/pe_ipv4_config] done! [00:32:18/pe_tcp_config] Initing TCP PE... [00:32:18/pe_tcp_config] done! [00:32:18/pe_udp_config] Initing UDP PE... [00:32:18/pe_udp_config] done! [00:32:18/pe_icmp_config] Initing ICMP PE... [00:32:18/pe_icmp_config] done! [00:32:18/pe_dsize_config] Initing dsize PE... [00:32:18/pe_dsize_config] done! [00:32:18/pe_pmatch_config] Initing pattern matching PE (native)... [00:32:18/bm_init] Using Turbo Boyer-Moore algorithm for string matching [00:32:18/pe_pmatch_config] Pattern matching component setup took 0.000461 seconds [00:32:18/pe_pmatch_config] done! [00:32:18/pe_conntrack_config] Initing connection tracking PE... [00:32:18/pe_conntrack_config] done! [00:32:18/pe_ctmatch_config] Initing connection tracking match PE... [00:32:18/ctmatch_rules_optimize] WARNING: Ignoring no_stream option for rule 8 [00:32:18/pe_ctmatch_config] done! [00:32:18/nvm_setup] Done [00:32:18/main] Capturing from interface lo [00:32:47/ApplicationCallback] ---------------------------- Rule matched: 00000 --------------------------- [00:32:47/ApplicationCallback] Snort rule ID...: 1624 [00:32:47/ApplicationCallback] Rule revision...: 6 [00:32:47/ApplicationCallback] Action..........: alert with message "FTP large PWD command" [00:32:47/ApplicationCallback] ---------------------------------------------------------------------------- [00:33:02/ApplicationCallback] ---------------------------- Rule matched: 00002 --------------------------- [00:33:02/ApplicationCallback] Snort rule ID...: 2125 [00:33:02/ApplicationCallback] Rule revision...: 8 [00:33:02/ApplicationCallback] Action..........: alert with message "FTP CWD Root directory transversal attempt" [00:33:02/ApplicationCallback] ---------------------------------------------------------------------------- [00:33:27/sighandler] WARNING: Received signal 2! [00:33:27/main] Done processing packets - Quitting [00:33:27/log_close] --- Log closed at Wed, 13 Dec 2006 00:33:27 +0100 ---