Snort mailing list archives
snort & pppoe
From: "Jo" <mail () cortical de>
Date: Thu, 27 Nov 2003 19:19:51 +0100
hi, i use snort2.0.2, barnyard & acid on the following machine extern----pppoe-eth0-ROUTER-eth1----intern i run snort for tests on all 3 interfaces. eth0 & ppp0 detect the same alerts. -is eth0 decoding the pppoe packets? eth0 & ppp0 doesnt work for payload logging. -why can they detect payload signatures but log them? i wrote some pass rules to ignore some traffic. -is it possible config a var for the dynamic pppoe ip? thx for help jo ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort & pppoe Jo (Nov 27)
- AW: snort & pppoe Jo (Dec 05)
- <Possible follow-ups>
- snort & pppoe Jo (Dec 03)