Snort mailing list archives
Re: var HOME_NET under Linux (fwd)
From: Ciprian Badescu <ciprian.badescu () alcatel ro>
Date: Mon, 30 Jun 2003 16:23:40 +0300 (EEST)
Hi,
ERROR: Undefined variable name: (/etc/snort/snort.eth1.conf:47): eth0_ADDRESS
eth0 Link encap:Ethernet HWaddr 00:50:FC:9E:46:44 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:14438274 errors:110 dropped:0 overruns:0 frame:0 TX packets:15323465 errors:0 dropped:0 overruns:0 carrier:0 collisions:53803 txqueuelen:100 RX bytes:3438876581 (3.2 GiB) TX bytes:3431480714 (3.1 GiB) Interrupt:11 Base address:0x4f00
Using ethx_ADDRESS or such definitions, you don't need to specify a IP network, but the network must be configured for that interface, so SNORT will find the network address himself. But I don't know if snort will re-read the interface configuration, if it is running, and the IP change/reconfiguration occurs. If you start snort after connecting (or after your interface is configured and has a IP address) should work. Ciprian Badescu (newbie)
Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: var HOME_NET under Linux (fwd) Ciprian Badescu (Jun 30)