sensor snort does not report an attack in payloads

pwnlandia / mhn

Modern Honey Network

GNU Lesser General Public License v2.1

2.43k stars 630 forks source link

sensor snort does not report an attack in payloads #834

Closed Axel383 closed 2 years ago

Axel383 commented 2 years ago

I installed a raspberry PI and use the wget command to deploy a sensor snort on my local network, I then install my sensor in my dmz by changing the network configuration but no attack goes back. Do you have an idea of the problem ? Thanks

d1str0 commented 2 years ago

From the raspberry pi, are you able to reach MHN? MHN must be reachable from the raspberry pi, and also must have the correct IP.

Axel383 commented 2 years ago

my firewall block communications between my raspberry and the mhn server I will add a rule allowing traffic to pass do you know which port is used for communication between the mhn server and the sensor snort?

d1str0 commented 2 years ago

It would need to connect with hpfeeds to port 10000.

d1str0 commented 2 years ago

Closing as this is a setup issue.