Snort mailing list archives

Re: snort.conf doesn't recognize internal address


From: David Lambert <dave () demo legallock com>
Date: Mon, 3 Dec 2001 10:41:54 -0600

Thanks for your quick reply. I did try that, and then got the error:

ERROR snort.conf (229) => Couldn't resolve hostname eth1_ADDRESS
Fatal Error, Quitting..

I presume it tries to do a DNS lookup on 'eth1_ADDRESS' ?

Dave.n Monday 03 December 2001 10:20 am, Guillaume wrote:
En réponse à David Lambert <dave () demo legallock com>:
I am new to snort, so please forgive me if this is trivial question.
If I specify HOME_NET as $eth1_ADDRESS I get the following error on
Linux:

 Parsing Rules file snort.conf

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
[!] ERROR snort.conf (48): Bad value in variable definition!
       Make sure you don't have a "$" in the var name
Fatal Error, Quitting..

Did you try with > eth1_ADDRESS < without the '$' ?


Guillaume

***********************************
Sent with HORDE/IMP (www.horde.org)

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?listžort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: