Snort mailing list archives
Difficulty setting HOME_NET to my interface address
From: "Charles Darwin" <darwin () netmadeira com>
Date: Fri, 14 Feb 2003 01:33:09 -0000
I'm having great difficulty doing this, because snort.config does not seems to accept my interface name when setting HOME_NET. As a cable modem user I've great interest on doing this, as my IP changes oftenly. Doing snort -W I get a list of my interfaces: Interface Device Description ------------------------------------------- 1 \Device\NPF_NdisWanIp (NdisWan Adapter (Microsoft's Packet Scheduler) ) 2 \Device\NPF_NdisWanIpx (NdisWan Adapter) 3 \Device\NPF_NdisWanBh (NdisWan Adapter (Microsoft's Packet Scheduler) ) 4 \Device\NPF_{B42CDDC9-B4BB-42BB-86A5-456FB6192510} (Realtek 8139-series PCI NI C (Microsoft's Packet Sche duler) ) 5 \Device\NPF_{10B946B4-4170-4447-9D02-6D2E135640BB} (Realtek 8139-series PCI NI C (Microsoft's Packet Sche duler) ) The interface I want is the 5. Then on snort.conf I write: var HOME_NET $\Device\NPF_{10B946B4-4170-4447-9D02-6D2E135640BB}_ADDRESS (line 48) then snort -T the result is: ------------------------------------ C:\Snort>snort -T Initializing Output Plugins! Log directory = log Initializing Network Interface \ using config file ./snort.conf Initializing Preprocessors! Initializing Plug-ins! Parsing Rules file ./snort.conf +++++++++++++++++++++++++++++++++++++++++++++++++++ Initializing rule chains... ERROR => Undefined variable name: (./snort.conf:48): Fatal Error, Quitting.. ---------------------------------------- Does anyone have an ideia of what I'm doing wrong? Kind regards, Paulo Santos Perneta <pperneta () netmadeira com>
Current thread:
- Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 13)
- <Possible follow-ups>
- RE: Difficulty setting HOME_NET to my interface address L. Christopher Luther (Feb 14)
- Re: RE: Difficulty setting HOME_NET to my interface address Erek Adams (Feb 14)
- Re: RE: Difficulty setting HOME_NET to my interface address Paulo Santos Perneta (Feb 15)
- Re: Difficulty setting HOME_NET to my interface address Paulo Santos Perneta (Feb 15)
- Re: RE: Difficulty setting HOME_NET to my interface address Erek Adams (Feb 14)
- RE: Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 14)
- Re: RE: Difficulty setting HOME_NET to my interface address Erek Adams (Feb 15)
- Re: RE: Difficulty setting HOME_NET to my interface address Chris Reid (Feb 16)
- Re: RE: Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 16)
- Re: RE: Difficulty setting HOME_NET to my interface address Paulo Santos Perneta (Feb 17)
- Re: RE: Difficulty setting HOME_NET to my interface address Erek Adams (Feb 15)
- Difficulty setting HOME_NET to my interface address Charles Darwin (Feb 14)