promisc help

["Paras pradhan" <paras () bajranet com np>]

hi all

i am runnning snort with acid in RH 9 box with the command:

snort -c /usr/local/src/snort-2.0.0/etc/snort.conf -D

now when i do a test from other host to that machine(.156) by:

nmap -p 25,53 -sX -P0 -D 1.2.3.4,5.6.7.8 x.x.x.156.

Snort is showing the correct result.

Now when i do test to other macchine in the same netwrok snotr is not
alerting.


I put the eth0 of the machine to promis mode by doing:


ifconfig eth0 prmisc.


But snort is not alerting traffic of my network. expect abuse to the
machine itself only.


Thanks in adv.
Paras pradhan
Systems Dept.
Bajranet PVT LTD
Kathmandu
Nepal.




-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users