Snort mailing list archives

Re: SNORT config Question -- FROM NEWBIE --


From: John Sage <jsage () finchhaven com>
Date: Fri, 22 Aug 2003 21:05:54 -0700

Dave:

On Fri, Aug 22, 2003 at 03:24:58PM +0100, Dave.Hartley () uk delarue com wrote:
Hi,
<snippage>
Anyway my question is can I run it on my MODEM Connection??

Problem is my machine is a Compaq Armada 500, Using a Win Modem...

I use KPPP to dial up...

I've been using snort on a dialup for several years.

In snort.conf:

# Step #1: Set the network variables:
var HOME_NET $ppp0_ADDRESS
var EXTERNAL_NET !$HOME_NET


My command line:

snort -b -i ppp0 -o -c /etc/snort/snort.conf


Works great, and is less filling :-/



- John
-- 
"Warning: time of day goes back, taking countermeasures."


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: