Re: Snort will not detect anything on stealth interface unless I assign IP

[Jason <security () brvenik com>]

Rhugga,

It might be helpful if you provide all the information you have and not 
what you think your problem is.

send us your snort.conf and the IP addresses you want to monitor, I 
assume you have a set number of addresses you are dealing with.

Rhugga wrote:

> Paul Schmehl wrote:
>
> > --On Monday, July 19, 2004 6:58 AM -0700 Rhugga 
> > <snort-list () sandiego420 com> wrote:
> >
> > > Is there any reason why this would not work:
> > >
> > > ifconfig eth1 down
> > > ifconfig eth1 0.0.0.0
> > > ifconfig eth1 up
> > You don't need an IP address, right?  So stop giving it one.
> >
> > ifconfig eth1 up is all you need.
> >
> > Paul Schmehl (pauls () utdallas edu)
> > Adjunct Information Security Officer
> > The University of Texas at Dallas
> > AVIEN Founding Member
> > http://www.utdallas.edu
>
>
>
> Yea, when that did not work  I added the IP addess. I have done probably 
> 50 different configs trying to get it to work. This solution I tried was 
> actually in the mail archvies
>
>
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users