RE: no ip addr. on 2nd interface (more info)

["Wirth, Jeff" <WirthJe () DNB com>]

From: T.Shaw [mailto:hshaw () safeweb com]

> Hello all, Thanks for the responces.. 
> Since i have this setup and working.. the hard part is done.. 
> now im wondering ( its been up for more than two weeks) why i 
> dont see any thing in the database. In setting up the 

Sounds like you have a switched network (based on the vlan comment below),
are your switches configured to forward to a monitoring port? If not this
might explain why you are not seeing any traffic. Throw snort in sniffer
mode, do you see any traffic????

I am on a switched network.. http://www.snort.org/docs/faq.html#1.8

> snort.conf file.. what exactly would be my HOME_NET set to?  

What is it set to now?

> We have multiple vlans internally.. could i just list them 
> all out? or "super" net them with like a /16 or something? ( 
> we have internal 192.168.x.x nets)

how to set HOME_NET.. http://www.snort.org/docs/faq.html#3.3

- Jeff


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users