RE: SNORT config Question

["Richard Shanks" <rshanks () harc edu>]

I assume you're using the linux version of snort, if you're connecting
with kppp? That the IP address is dynamically assigned on the interface
you want to monitor should not matter. I've never tested it on a modem
interface, but I guess you could use '-i ppp0' when you run snort to
specify that interface instead of an Ethernet interface.

As for using a winmodem, I've never had much luck with those on linux,
but maybe there are drivers available.

RS

-----Original Message-----
From: Dave.Hartley () uk delarue com [mailto:Dave.Hartley () uk delarue com] 
Sent: Friday, August 22, 2003 9:13 AM
To: security-basics () securityfocus com
Subject: SNORT config Question


I want to get to grips with Snort.. so I have set it up on my laptop...

Except it's a Compaq Armada 500

Using a Win Modem...

I use KPPP to dial up...

I want to configure a sensor to monitor my modem connection when online.
I
am dynamically assigned an IP Address when connecting.

Any ideas??

Also I don't know what to specify in teh interface as Internet
Configuration
and Modem probes don't detect my modem.

Any help appreciated.

Dave


This message is strictly private and contains confidential information
intended only for the use of the person named above. If you have
received this e-mail in error and are not the intended recipient you
must not disclose, copy or distribute it to anyone else. Please
immediately advise the sender and delete this email and all attachments.


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
----------------------------------------------------------------------------