Snort mailing list archives
RE: Setting the nic up ??
From: Erek Adams <erek () theadamsfamily net>
Date: Mon, 10 Jun 2002 15:21:03 -0700 (PDT)
On Mon, 10 Jun 2002, Walgamotte, David wrote:
Similar, however the mtu is 1500. It just seems to pickup arp packets. Its is also plugged into a switch directly connected to the internet. I started up snort and nothing, here is the ifconfig -a bash-2.00# ifconfig -a lo0: flags=849<UP,LOOPBACK,RUNNING,MULTICAST> mtu 8232 inet 127.0.0.1 netmask ff000000 hme1: flags=8c3<UP,BROADCAST,RUNNING,NOARP,MULTICAST> mtu 1500 inet 0.0.0.0 netmask 0 ether 8:0:20:b2:f7:e3
[...snip...]
ARP: 16 (100.000%)
[...snip...] That's all you _should_ see--Unless you have some way to mirror/span the other ports to your data port on the switch. Have a look at: http://www.snort.org/docs/faq.html#1.8 and http://www.snort.org/docs/faq.html#6.21 Cheers! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Setting the nic up ?? Walgamotte, David (Jun 10)
- Re: Setting the nic up ?? D W (Jun 10)
- Re: Setting the nic up ?? Glenn Forbes Fleming Larratt (Jun 10)
- <Possible follow-ups>
- RE: Setting the nic up ?? COULOMBE, TROY (Jun 10)
- RE: Setting the nic up ?? Walgamotte, David (Jun 10)
- RE: Setting the nic up ?? Erek Adams (Jun 10)