Re: How to configure HOME_NET for less than a Class C

[Phil Wood <cpw () lanl gov>]

On Wed, Nov 06, 2002 at 09:13:51AM -0500, John  Lathem wrote:
> How do I configure HOME_NET for less than a full Class C?  I have 32
> addresses in the range x.x.x.162 through x.x.x.190 (plus gateway .161).
> If I make HOME_NET x.x.x.0/24, Snort will ignore attacks from other
> addresses on the Class C but not in my range.  Can HOME_NET be
> configured to include only my addresses?
Strange division of the class c space.  If I were managing the network,
I would have given you 32 addresses using

var HOME_NET 192.168.1.160/27

192.168.1.160/27 is a subnet representing 1/8 of Class C network 192.168.1

                                 Address Range 192.168.1.160 - 192.168.1.191

where 192.168.1.160 is the "network"
      192.168.1.191 is the "broadcast"
      192.168.1.161 is the "gateway"
      
Come to think about it, that looks like what you got!


> Thanks!
>
> ---
> John Lathem  <lathem () z-space com>
>
>
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: See the NEW Palm 
> Tungsten T handheld. Power & Color in a compact size!
> http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list

-- 
Phil Wood, cpw () lanl gov



-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm 
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users