RE: Snort logging and the home network

["McCammon, Keith" <Keith.McCammon () eadvancemed com>]

$HOME_NET is just a variable that is used within the config/rules files,
mainly .  Don't think of it as a Snort directive, but rather as a simple
time-saver, so that every person who downloads Snort doesn't have to
run/create some silly script to drop x.x.x.x/x into every rule that
applies.

The -h in the command line is the directive that actually tells Snort
which network should be treated like the "target," if you will.

Hope this helps.

Keith

-----Original Message-----
From: Bill McCarty [mailto:bmccarty () apu edu]
Sent: Wednesday, March 06, 2002 3:01 PM
To: snort users list
Cc: kamesh_rajaram () sify com
Subject: [Snort-users] Snort logging and the home network

<snip>
I checked my startup script and found it did not include the -h option.
So, 
as an experiment, I added one specifying the home net, and restarted
snort. 
Bingo! I immediately got the logs that had stopped appearing.

Q: What is the relationship between the HOME_NET variable in snort.conf
and 
the -h switch on the command line? I hope that, by better understanding 
this, I'll know why my configuration ceased working.
</snip>

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users