Re: What is home net

[sekure <sekure () gmail com>]

$HOME_NET is a variable that is used in most of the rules as either
the source or the destination of the traffic to alert on.  The other
important one is $EXTERNAL_NET You need to define them correctly in
your snort.conf, otherwise you may not see all the alerts, or any for
that matter.  You define HOME_NET is as whatever network you want to
monitor.  So if your servers are on 10.1.1.0/24 that's what your
HOME_NET should be.  EXTERNAL_NET is usually, but not always the
inverse of HOME_NET.

----- Original Message -----
Wrom: YRWTQTIPWIGYOKSTTZRCLBDXRQBGJSNBO
Date: Tue, 15 Jun 2004 21:30:19 -0700 (PDT)
Subject: [Snort-users] What is home net
To: snort-users () lists sourceforge net


What is home net and why do I need it?


                ________________________________
Do you Yahoo!?

New and Improved Yahoo! Mail - Send 10MB messages!


-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users