Snort mailing list archives
Re: Configuration issue, Part II
From: Erek Adams <erek () theadamsfamily net>
Date: Mon, 24 Sep 2001 07:30:33 -0700 (PDT)
On Mon, 24 Sep 2001, John Sage wrote:
Let's see... *rummages around in logs*
[...snip...]
<same sorta crap goes on for hours...> Realize, again, that this is snort and ipchains running on the same box.
I think that's the key thing here... If it's on the same box, it should be seen by snort, whereas if it's behind the firewall, it won't.
Dialup, ppp... Command line: snortREL -b -i ppp0 -c /usr/local/snort-1.8.1-RELEASE/snortREL.conf &
*Gack* Now that I really think about it, I do recall Marty or Dragos going into a lengthy discussion on this. Same box, OK. Seperate and behind, bad. I'm such a gimp. Thanks for the correction John! ----- Erek Adams Nifty-Type-Guy TheAdamsFamily.Net _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: Configuration issue, Part II, (continued)
- RE: Configuration issue, Part II DJDave Sobel (Sep 24)
- RE: Configuration issue, Part II Erek Adams (Sep 24)
- RE: Configuration issue, Part II Erek Adams (Sep 24)
- Re: Configuration issue, Part II Greg Sarsons (Sep 24)
- Re: Configuration issue, Part II Erek Adams (Sep 24)
- RE: Configuration issue, Part II John Berkers (Sep 25)
- Re: Configuration issue, Part II John Sage (Sep 24)
- Re: Configuration issue, Part II John Sage (Sep 24)
- Re: Configuration issue, Part II Erek Adams (Sep 24)
- Re: Configuration issue, Part II John Sage (Sep 24)
- Re: Configuration issue, Part II Erek Adams (Sep 24)