Re: Activating a sniffing nic

[Timothy A.Holmes <tholmes () mcaschool net>]

Thanks to all who have suggested solutions:

I changed my init scripts around a bit so that the eth1 interface is my
communication interface rather than the sniffer, that allows snort to
start normally on eth 0 and I can still talk to it on eth 1

Thanks folks

TIM


Timothy A. Holmes
IT Manager / Network Admin / Web Master / Computer Teacher
 
Medina Christian Academy
A Higher Standard...
 
Jeremiah 33:3
Jeremiah 29:11
Esther 4:14
 

> -----Original Message-----
> From: Eric Hines [mailto:eric.hines () appliedwatch com] 
> Sent: Sunday, November 05, 2006 10:08 PM
> To: Timothy A. Holmes
> Cc: snort-users () lists sourceforge net
> Subject: Re: [Snort-users] Activating a sniffing nic
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> You want to use the -i switch, which instructs it to use a 
> particular interface.
>
> Best Regards,
>
> Eric Hines, GCIA, CISSP
> CEO, President
> Applied Watch Technologies, LLC
> 1095 Pingree Road
> Suite 221
> Crystal Lake, IL 60014
> Toll Free: (877) 262-7593
> Fax: (847) 854-5106
> Cell: (847) 456-6785
> Web: www.appliedwatch.com
>
>
>
> Timothy A.Holmes wrote:
> > Hi folks:
> > I got my snort box rebuilt (AGAIN)
> >
> > I have 2 nics in it
> >
> > The sniffing nic is active and has no ip
> >
> > I just need to know how to tell snort (in the normal 
> startup routines) 
> > to use it
> >
> > Thanks folks
> >
> > TIM
> >
> >
> > Timothy A. Holmes
> > IT Manager / Network Admin / Web Master / Computer Teacher
> >  
> > Medina Christian Academy
> > A Higher Standard...
> >  
> > Jeremiah 33:3
> > Jeremiah 29:11
> > Esther 4:14
> ----------------------------------------------------------------------
> > --- Using Tomcat but need to do more? Need to support web services, 
> > security?
> > Get stuff done quickly with pre-integrated technology to 
> make your job 
> > easier Download IBM WebSphere Application Server v.1.0.1 based on 
> > Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=1216
> > 42 _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (Darwin)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFFTqcH1va6QYTV0EMRAhO2AJsHMfKWDaSZS9Y2yyoJOBN8LpdMfgCgk7Hl
> dI/H41saDNLjwqNoPrMVDz4=
> =PX6N
> -----END PGP SIGNATURE-----


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users