Snort mailing list archives
network issue?
From: kinomakino <kinomakino () hotmail com>
Date: Tue, 9 Sep 2014 10:55:57 +0200
First, thanks for the help. I have an install of snort on a vps with a setting of "weird" for my network. I put the ifconfig. All decisions of the webservers DNS point to the IP of eth2: 1 If I put on snort eth2: 1 HOMENET and put that IP, I have only one traffic alerts TOR rule (emerging). if I do the same "attacks" against another snort with the same rules, if I see the alerts, so that alerts are not. I think it's the network. You can help me with this? Thank you! eth2 Link encap: Ethernet HWaddr 00: 25: 90: 82: BA: A6 inet addr: PUBLIC IP Bcast: **** Mask: 255.255.255.0 BROADCAST RUNNING MULTICAST MTU UP: 1500 Metric: 1 RX packets: 325077067 errors: 0 dropped: 0 overruns: 0 frame: 0 TX packets: 478271928 errors: 0 dropped: 0 overruns: 0 carrier: 0 collisions: 0 txqueuelen: 1000 RX bytes: 204005183266 (189.9 GiB) TX bytes: 441 545 055 832 (411.2 GiB) eth2: 1 Link encap: Ethernet HWaddr 00: 25: 90: 82: BA: A6 inet addr: PUBLIC Bcast IP: ****** Mask: 255.255.255.255 BROADCAST RUNNING MULTICAST MTU UP: 1500 Metric: 1 eth2: 2 Link encap: Ethernet HWaddr 00: 25: 90: 82: BA: A6 inet addr: PUBLIC IP Bcast: 188165133135 Mask: 255.255.255.255 BROADCAST RUNNING MULTICAST MTU UP: 1500 Metric: 1
------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce. Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- network issue? kinomakino (Sep 09)