RE: var HOME_NET under Linux

["LaRose, Dallas" <dlpassport () s2access com>]

> > Here is the Line from my snort.conf
> > #Home-Net
> > var HOME_NET $eth0_ADDRESS

It looks like you were using eth0 in your config and ppp0 to
start snort.  Try using a -i when calling snort to sort this
out.



> > snort -c /etc/snort/snort.eth0.conf
> > Running in IDS mode
> > Log directory = /var/log/snort
> >
> > Initializing Network Interface ppp0
> >
> >         --== Initializing Snort ==--
> > Initializing Output Plugins!
> > Decoding raw data on interface ppp0
> > Initializing Preprocessors!
> > Initializing Plug-ins!
> > Parsing Rules file /etc/snort/snort.eth0.conf
> >
> > +++++++++++++++++++++++++++++++++++++++++++++++++++
> > Initializing rule chains...
> > ERROR: Undefined variable name: (/etc/snort/snort.eth0
> > .conf:13): eth0_ADDRESS Fatal Error, Quitting..



-----Original Message-----
From: Roy S. Rapoport [mailto:snort-users () ols inorganic org] 
Sent: Monday, June 23, 2003 2:19 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] var HOME_NET under Linux


On Mon, Jun 23, 2003 at 02:23:00PM -0400, Jason wrote:
> You need to define $eth_ADDRESS in the config file
>
> var $eth0_ADDRESS [0.0.0.0/0]
>
> Replace the 0.0.0.0/0 with your own address/subnet

No you don't.  FAQ 3.7

-roy


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users