Re: snort.conf: HOME_NET value for AWS EC2 instance

["Al Lewis (allewi)" <allewi () cisco com>]

Probably needs to be a 172.16.0.0/12 address since I think that’s the default for private VPC’s.

But that it all depends on your addressing scheme and the resources you are trying to protect.


Albert Lewis
ENGINEER.SOFTWARE ENGINEERING
SOURCEfire, Inc. now part of Cisco
Email: allewi () cisco com<mailto:allewi () cisco com>

From: Paul Li <paul () scybersecurity com<mailto:paul () scybersecurity com>>
Date: Friday, February 3, 2017 at 10:01 AM
To: 'snort-users' <snort-users () lists sourceforge net<mailto:snort-users () lists sourceforge net>>
Subject: [Snort-users] snort.conf: HOME_NET value for AWS EC2 instance

For Snort deployed on an AWS EC2, what value should be for HOME_NET  the snort.conf configuration?

Thanks,
Paul

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!