IPS is enabled, I have tested the "connectivity" "balanced" and "security" templates, the snortd service is running, but the logs never show any activity at all. Status/IPS report always shows zero events, and /var/log/snort/alert is always empty. The docs seem to say you just install the package, enable it, and it runs. I somehow doubt that the problem is just that no one is interested in probing my server.
I don't see pulledpork in the list of running services, so perhaps that is wrong? Anyway, I'm wondering if there is some IPS dependency that I may be missing? Thanks.