RE: Snort Windows - not working with ISDN Adapter

["Michael Steele" <michaels () silicondefense com>]

Mirko,

 

Set:

 

HOME_NET 217.2.43.108/32

Or

HOME_NET 217.2.43.108

 

This will ONLY monitor that machine.

 

HOME_NET 217.2.43.108/24

 

This will monitor the complete 217.2.43.xxx network (class C)

 

To choose the NIC to monitor use "snort -W"

 

Then :

 

Snort -c <full path>\snort.conf -l <full path>\log -ix

In the above switch -ix the 'x' is the interface that you want snort to
monitor, and using the -W switch will get you a list of avaiable NIC's that
snort may monitor on.

-Michael
--
 Michael Steele | System Engineer / Support Technician    
 mailto:michaels () silicondefense com   
 Silicon Defense - The Cyber-War Defense Company
 Website: http://www.silicondefense.com
 Snort: Open Source Network IDS - http://www.snort.org

  _____  

From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Mirko
Matytschak
Sent: Monday, April 14, 2003 7:31 AM
To: snort-users () lists sourceforge net

 

Hi there,

i have installed snort on WinXP and Win2K with Winpcap 3.0. It works fine on
the local ethernet but doesn't track any traffic on my Fritz ISDN card.
After dialing I get the IP adress with Ipconfig and enter it as HOME_NET
like that:
var HOME_NET 217.2.43.108/255.255.255.255

or 

var HOME_NET any


Has anybody an idea how to get that to work?
Mirko