RE: var HOME_NET under Linux

["Schmehl, Paul L" <pauls () utdallas edu>]

> -----Original Message-----
> From: Thomas Bechtold [mailto:CharlieBlue () gmx de] 
> Sent: Monday, June 30, 2003 5:23 AM
> To: Erek Adams
> Cc: "snort-users () lists sourceforge net"@utdallas.edu
> Subject: Re: [Snort-users] var HOME_NET under Linux
>
>
> hmm, I think you don't understand my problem.
> I used in snort.conf the following line:
> var HOME_NET $eth0_ADDRESS
>
> And when i start snort with this conf i get the following error:
>
> server:/etc/snort# snort -c /etc/snort/snort.eth0.conf

Start snort like this:
Snort -c /etc/snort/snort.eth0.conf -I eth0

You need to specify the interface that you're monitoring.  Read the man
page.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu/~pauls/ 


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users