Snort mailing list archives

Noob question on snort.conf


From: storm <storm-shadow () comcast net>
Date: Sat, 01 Jun 2002 22:58:33 -0400

Hi everyone. Need a little help with snort.conf editing.
i ucommented the line that says:

#You can specify it explicity as:
#var HOME_NET 10.1.1.0/24

#or use global variable etc etc

and I commented it to:

#var HOME_NET 172.16.0.1/30

Is this all I have to do to set HOME_NET? I notice there were a bunch of other things you could comment that were 
related to HOME_NET. Is what I did enough?

Also, where it asks you to list the servers on your network like this:
#var HTTP_SERVERS $HOME_NET

Where do I put the ip of the webserver? I suppose where it says "HTTP_SERVERS" ?

TIA guys

Current thread: