Snort mailing list archives

Re: Pinging all IP's


From: Edin Dizdarevic <edin.dizdarevic () interActive-Systems de>
Date: Fri, 20 Aug 2004 16:20:47 +0200

Hi,

Packets sent from localhost addressing to any of its own IPs will fall
back to the loopback interface. It has nothing to do with if you have
your NICs connected to the carrier or not. Try running tcpdump on lo and
ping your NICs and you'll see. The packets will not leave the host.

For more information on loopback se Stevens, The TCP/IP Protocoll Suite.

Regards,
Edin

Don Merrifield wrote:

Hello Everyone, I don't post many questions, but I read most of the postings. I have a issue I believe to be a problem. I am installing
Snort (and several of the extras) on a RH 9 box, 550Mhz AMD, 192 MB
ram, 10 gig hard drive and 3 Nic's. IP addresses assigned to all
Nic's. 192.168.1.150 -151 -152. 255.255.255.0 . The issue I am seeing
is with only one Nic plugged into the network I can still ping all
the IP addresses. To me this doesn't seem correct. I'm not an expert
by any means, but this doesn't seem right. Is there a config file I
need to edit? Any help would be appreciated.



Thanks in advance,



Don Merrifield

Merrifield Consulting



--
Edin Dizdarevic


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: