Re: stealth interface

[Matt Kettler <mkettler () evi-inc com>]

This is in the FAQ you read, you just failed to read the first answer and 
skipped straight to the third one.

http://www.snort.org/docs/faq.html#3.1


3.1 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--

Q: How do I setup snort on a 'stealth' interface?

A: Bring up the interface without an IP address on it. See FAQ 3.2...
   http://www.geocrawler.com/archives/3/4890/2000/9/0/4399696/


<snipped off the other answers involving read-only cables and taps>



3.2 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--


Q: How do I run snort on an interface with no IP address?

A: ifconfig eth1 up







At 03:26 PM 4/7/2003 -0400, d_greenjr wrote:
> Can someone tell me or give me the URL on how to create an interface with 
> no ipaddr (stealth), on a linux [RH8] system? (Not the receive only 
> cable-I saw that in the snort FAQs)  I have searched the Internet and the 
> snort archives but have not found a message/page that describes what to 
> do-only the end results.  Thanks



-------------------------------------------------------
This SF.net email is sponsored by: ValueWeb: 
Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users