RE: RE: stealth interface

[Eric Baur <Eric.Baur () Certegy com>]

        That was my first thought as well... unfortunatly, it appears that
the ethernet devices are not in the /dev directory, but "created" by the
kernel on the fly.  (Kind of makes sense, really, since you never refer to
them as /dev/eth0 as you would a disk.)
        Anyway, you can use aliases (and clones?) to make something like
eth0:LAN or eth1:DMZ show up, but only on numbered interfaces, not stealth
ones.  You can also give it a nickname, but that only works for the ifup and
ifdown scripts (in RedHat), not for things like ethereal or snort.
Frustrating, but at this point I'm now assuming it isn't possible to use a
truly arbitrary name.

Eric

-----Original Message-----
From: Sanderson, Josh [mailto:JoshS () reddingbankofcommerce com] 
Sent: Wednesday, April 09, 2003 12:14 PM
To: 'snort-users () lists sourceforge net'
Subject: [Snort-users] RE: stealth interface

[snip]

Also, in response to Eric Baur's next mystery, can't you simply create a
symbolic link to ethX in the dev directory? Seems like I saw that mentioned
in a howto somewhere - possibly the Gentoo.org setup instructions.

[snip]


-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users