RE: Can snort listening Interface wtihout IP config ured?

["Bradley, Paul" <paulb () cta com>]

> -----Original Message-----
> From: samwun [mailto:samwun () hgcbroadband com] 
> Sent: Saturday, August 16, 2003 2:45 AM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Can snort listening Interface wtihout 
> IP configured?
>
>
> Hi, 
>
> I want to setup Snort as an ethernet sniffer listening on a LAN card
> which has no IP address. 
> Does a normal way start up of snort will meet this reqirement?
>
> Eg. Snort -c snort.conf
>
> Thanks
> Sam

this is how i have mine setup to listen with no IP...


let's say the listening interface is eth1...i have the following in the
/etc/rc.local startup script:


/sbin/ifconfig eth1 up promisc -arp


the /etc/sysconfig/network-scripts/ifcfg-eth1 file contains:

DEVICE=eth1
ONBOOT=no



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users