Snort mailing list archives

Re: Newbie Install on OpenBSD Question


From: twig les <twigles () yahoo com>
Date: Mon, 27 Jan 2003 16:58:42 -0800 (PST)

I won't give you flack for running so many things on
one box since others probably will :).  HOME_NET
should be the IP of the box and EXTERNAL_NET can be
whatever you are worried about.

As for the ports, if you did a "make install clean"
then OpenBSD erased the work directory and with it the
mysql script.  Try doing a make deinstall (or OpenBSD
equivalent) and then a "make install".  Please note
that I haven't used OpenBSD for about a year and my
ports installation syntax is born of FreeBSD.


--- Siobahn Hotaling <siobahn () siobahn com> wrote:
I've been scouring the Snort FAQ and README's all
day, but I still have a
few unsolved questions and I was hoping that someone
could help.
(installing from ports on OpenBSD 3.2)

1.  The machine I am installing on is a web server
that is also configured
as a firewall to an internal network, but I am more
interested in the
traffic that comes into the server (not into the
internal network).  If this
is so, do I configure the $HOME_NET and
$EXTERNAL_NET IP addresses both to
be the IP address of the server?

2.  I can't find the sql statements to create the
tables snort needs to put
the logs into a mysql database anywhere - nothing
showed up in the install
directory.

Any help would be much appreciated!

Thanks






-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld =
Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or
unsubscribe:

https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:

http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Know yourself and know your enemy and you will never fear defeat.         
-----------------------------------------------------------

__________________________________________________
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
http://mailplus.yahoo.com


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: