Re: ethernet without IP

[Abu Emran Abu Bakar <aeab () iiu edu my>]

tq
yes i've did it with -i still the warning appears

> Initializing Network Interface eth1
> > WARNING: OpenPcap() device eth1 network lookup:
> >         SIOCGIFADDR: eth1: Cannot assign requested
> > address
> > Decoding Ethernet on interface eth1
> >
> >         --== Initialization Complete ==--


did a ps -ax and ifconfig yup snort running and promisc 
yet no logging?..even tough i did few  scanning..just 
to test..




Quoting akshaye kalkura <draci () hotmail com>:

> hi,
>
> while executing snort, also mention the interface u 
want snort to listen on
> there is a -i option in it....pls chk that..u cld 
give soemthing like this 
> snort -i eth0 -c snort.conf (this is for the ethernet 
with ip)
> if u want snort to listen on the card which has no 
ip, then u will have to 
> bring that interface down and then up: ifconfig eth1 
down/up, then
> snort -i eth1 -c snort.conf
>
> ak.
>
> > From: Abu Emran Abu Bakar <aeab () iiu edu my>
> > Reply-To: aeab () iiu edu my
> > To: snort-users () lists sourceforge net
> > Subject: [Snort-users] ethernet without IP
> > Date: Thu, 20 Sep 2001 16:38:56 -0800 (GMT)
> >
> > Hi all, i am a newbie
> > I am installing snort on my machine with two network
> > interfaces. one without IP, read the snort's FAQ and
> > followed it (regarding without IP)
> > This is how i am executing it:
> > ./snort -D -d  -h xxx.xxx.0.0/16 -c snort.conf
> >
> > and this is the result:
> >
> > Initializing Network Interface eth1
> > WARNING: OpenPcap() device eth1 network lookup:
> >         SIOCGIFADDR: eth1: Cannot assign requested
> > address
> > Decoding Ethernet on interface eth1
> >
> >         --== Initialization Complete ==--
> >
> >
> > however i cannot see any logging from snort, have 
tried
> > few scanning but snort did not logged ..
> >
> > please help ?.
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-
users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-
users
>
________________________________________________________
_________
> Get your FREE download of MSN Explorer at 
http://explorer.msn.com/intl.asp
>

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users