Re: snort on stealth mode

[Denis Ducamp <Denis.Ducamp () hsc fr>]

On Thu, May 31, 2001 at 05:22:16PM +0800, manoj wrote:
> Hi,
>
> I just started working on snort, wondering how to make snort box in stealth mode ?

http://www.snort.org/FAQ.html#q24

--faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q:  How do I setup snort on a 'stealth' interface?

A:  Bring up the interface without an IP address on it.
    http://www.geocrawler.com/archives/3/4890/2000/9/0/4399696/
A:  Use an ethernet tap, or build your own 'receive-only' ethernet cable.
    http://www.robertgraham.com/pubs/sniffing-faq.html#receive-only

--faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--

Denis Ducamp.

-- 
 Denis.Ducamp () hsc fr --- Hervé Schauer Consultants --- http://www.hsc.fr/
Owl/snort/hping/dsniff en français  http://www.groar.org/~ducamp/#sec-trad
            Owl en français    http://www.openwall.com/Owl/fr/
 Du bon usage de ... http://usenet-fr.news.eu.org/fr-chartes/rfc1855.html

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users