Snort mailing list archives
Re: Snort on Linux with no IP
From: "Tony Fraser" <tony () sybaspace com>
Date: Mon, 23 Feb 2004 09:30:23 -0800
MessageIf this is actually the second NIC in the box you might need to load the appropiate kernel module/driver: modprobe <driver name> and or modify your /etc/modules.conf appropriatly. ----- Original Message ----- From: Grejda, Eric To: 'Brian McNeilly' ; snort-users () lists sourceforge net Sent: Monday, February 23, 2004 5:35 AM Subject: RE: [Snort-users] Snort on Linux with no IP How many network interfaces do you have in your Snort sensor? On Linux machines, interface numbering starts at zero. If you only have one NIC installed, you'd have to reference eth0: ifconfig eth0 up -- Eric Grejda -----Original Message----- From: Brian McNeilly [mailto:bmcneilly () shaw ca] Sent: Friday, February 20, 2004 7:23 PM To: snort-users () lists sourceforge net Subject: [Snort-users] Snort on Linux with no IP I apologise in advance for the newbie question, which undoubtedly has been discussed to death already. Before you send me to the FAQ, here is the relevant snippit from there: 3.1 How do I setup snort on a 'stealth' interface? *BSD and Linux: ifconfig eth1 up OK, so I do this and the response I get is: eth1: unknown interface: No such device Can anyone elaborate on the rather limited response found in the FAQ for this issue? Is seems to me that many people have asked about this before, but there never has been an appropriate explanation put into the FAQ (I've just spent the entire afternoon reading mail archives to no avail). Sorry if I'm just stupid, but the FAQ isn't really helpful on this issue. ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort on Linux with no IP Brian McNeilly (Feb 20)
- Re: Snort on Linux with no IP James Riden (Feb 20)
- Re: Snort on Linux with no IP Erek Adams (Feb 20)
- Re: Snort on Linux with no IP Yonah Russ (Feb 24)
- <Possible follow-ups>
- RE: Snort on Linux with no IP Grejda, Eric (Feb 23)
- RE: Snort on Linux with no IP Mark Fagan (Feb 23)
- Re: Snort on Linux with no IP Tony Fraser (Feb 23)
- Re: Snort on Linux with no IP Brian McNeilly (Feb 23)
- RE: Snort on Linux with no IP Schmehl, Paul L (Feb 24)
- RE: Snort on Linux with no IP ypwhich (Feb 24)
- Re: Snort on Linux with no IP Gabriel L. Somlo (Feb 24)