Snort mailing list archives
Re: My settings and output of 3 test on snort, is this normal?
From: Erek Adams <erek () snort org>
Date: Thu, 6 Mar 2003 19:22:15 -0500 (EST)
On Thu, 6 Mar 2003, mike Hughes wrote:
Whats Up! Aliright soo my HOME_NET should be eth0? and EXTERNEL_NET should be any? Casue on my network "eth0 is connected to the INTERNET" and "eth1(192.168.0.1) is connected to my LAN"? var HOME_NET $eth0_ADDRESS var EXTERNAL_NET any Like this its suppose to be?
Change the second one to: var EXTERNAL_NET $!HOME_NET Unless you have a _good_ reason to use any. Remember the fewer addresses that snort has to consider, the faster it is. Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger for complex code. Debugging C/C++ programs can leave you feeling lost and disoriented. TotalView can help you find your way. Available on major UNIX and Linux platforms. Try it free. www.etnus.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- My settings and output of 3 test on snort, is this normal? mike Hughes (Mar 06)
- Re: My settings and output of 3 test on snort, is this normal? Bamm Visscher (Mar 06)
- <Possible follow-ups>
- Re: My settings and output of 3 test on snort, is this normal? mike Hughes (Mar 06)
- Re: My settings and output of 3 test on snort, is this normal? Erek Adams (Mar 06)
- Re: My settings and output of 3 test on snort, is this normal? Nigel Houghton (Mar 10)