Snort mailing list archives

UPDATE eth1 without an IP = no worky


From: "Jason Whitson" <jason () visionxtreme net>
Date: Wed, 25 Jun 2003 14:26:01 -0500

"What is your specific error?"
- Unable to activate eth1. This is using the RH's network config screen.
- I use ifconfig eth1 up and don't get any output, so I assume it's up

I can get snort to run on the command line with:  snort -b -A fast -c
snort.conf
with snort.conf having this line: var HOME_NET 172.16.0.0/32 (I am testing
inside with a hub between 2 active switches)

It just shows a screen on the console with no more output after loading.
Should the ACID console be showing data?

Also I have the snortd file to start snort upon boot but it never works.
Even after changing eth0 to eth1. Ideas?

I've been working on this all day, maybe I need to step away ... but I am
not getting anywhere.


Jason Whitson
VisionXtreme Computers
www.visionxtreme.net


----- Original Message -----
From: "Joe Matusiewicz" <joem () nist gov>
To: "Jason Whitson" <jason () visionxtreme net>;
<snort-users () lists sourceforge net>
Sent: Wednesday, June 25, 2003 11:19 AM
Subject: Re: [Snort-users] eth1 without an IP = no worky


At 10:53 AM 6/25/03, Jason Whitson wrote:
Hi All,

When setting up snort to run on RedHat 7.3 I am unable to activate a NIC
without an IP. This is going to be my sniffing NIC and the documentation
says it cannot have an IP.

Am I missing something?

I've been able to get it to work using

ifconfig -eth0 0.0.0.0

You'll have to run snort with the -i switch or it won't work.

-- Joe



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: