Snort mailing list archives

Re: Multiple IP


From: "Salvatore Basso" <sasab () pixteam com>
Date: Mon, 3 Jun 2002 09:45:37 +0200

Hello, thanks for the answer...
therefore I must modify the file snort.conf therefore:
var HOME_NET [ ip1, ip2 ]
just?
excuse but I must makes an other question you, what you mean for:
NOT * on to switched ethernet port ? thanks.

        -Salvatore.


----- Original Message -----
From: "matt" <mkettler () evi-inc com>
To: "Salvatore Basso" <sasab () pixteam com>;
<snort-users () lists sourceforge net>
Sent: Saturday, June 01, 2002 10:22 PM
Subject: Re: [Snort-users] Multiple IP


Modify the HOME_NET variable in snort.conf, and make sure that you are
*NOT* on a switched ethernet port.  (if you're switched, traffic for other
machines won't show up on your ethernet port, so it won't matter how snort
is configured.)

That's all you should need to do on a *NIX setup, and I assume there's
nothing extra for Win32, but that's a bit of a strange build that I've not
used so I cannot speak conclusively on the matter.


At 06:55 PM 5/31/2002 +0200, Salvatore Basso wrote:
Hi, I use the version for windows, and have the requirement of monitoring
more IP addresses, have read that it must modify the file of
configuration
but in which point? thanks.

        -Salvatore.




_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: