Subnetmask with option <device>_ADDRESS

[Fritjof Heyde <wusel51 () gmx de>]

Hello List,

I wrote earlier that I had a problem with setting my homenet with the 
command line option -h <device>_ADDRESS.
Result was, that I dont get any alarms anymore.

Ok!
I think I figured out why this is happening.

The IP and Netmask of  my device (ppp0) is set by my ISP.
And for what reason ever they use the Netmask 255.255.255.255
Which is as I recall the loopback device.
So the Netmask basicly doenst have any IP adresses!

Good one! :)

In the FAQ it says, that option <device>_ADDRESS animates snort to get 
the IP and the netmask automatically from that device.
Is there a way to set the Netmask manually even if I use the -h 
<device>_ADDRESS option?

I actually dont know if that would solve the problem, but its worth a 
try! :)

Anybody has some hints?

greets
Fritjof



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users