Snort mailing list archives
RE: stealth interface
From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Mon, 4 Mar 2002 11:54:40 -0500
The $HOME_NET variable should be set to reflect the network that your Snort sensor is protecting, regardless of interface addresses (or lack thereof). -----Original Message----- From: Basil Saragoza [mailto:snortlst () hotmail com] Sent: Monday, March 04, 2002 11:48 AM To: snort-users () lists sourceforge net Subject: [Snort-users] stealth interface I configure snort to run on the ip-less interface.How should i set the $HOME_NET? To $eth1_ADDRESS ....mut it doesn't have an ip... To the address of the second nic on the machine? thx. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- stealth interface Basil Saragoza (Mar 04)
- <Possible follow-ups>
- RE: stealth interface McCammon, Keith (Mar 04)