Re: snort.conf

[John Sage <jsage () finchhaven com>]

Dave:

In snort.conf for 1.8.1-RELEASE:

# You must change the following variables to reflect
# your local network. The variable is currently
# setup for an RFC 1918 address space.
#
# You can specify it explicitly as:
#
# var HOME_NET 10.1.1.0/24
#
# or use global variable $<interfacename>_ADDRESS
# which will be always initialized to IP address and
# netmask of the network interface which you run
# snort at.

Editing this should do the trick, unless I'm misunderstanding your question.

- John

--
John Sage
FinchHaven, Vashon Island, WA, USA
http://www.finchhaven.com/
mailto:jsage () finchhaven com
"The web is so, like, five minutes ago..."



Dave Koll wrote:

> I will be changing the external IP address scheme on my network soon.  How
> and where in snort.conf do I make those changes.
>
> Dave Koll
> CCNA, A+, & Network+ certified
> Network Operation Tech; Strata One
> dkoll () strataone com



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users