Snort mailing list archives

RE: Packet Loss on a NIC without TCP/IP bound


From: "Snort List" <snortlist () hotmail com>
Date: Thu, 15 Nov 2001 11:46:04 -0600

I am receiving alerts but when I stop snort it reports that it has 100% packet loss even tho it is logging and sending alerts..


From: Michael Aylor <maylor () swbanktx com>
To: 'Snort List' <snortlist () hotmail com>, snort-users () lists sourceforge net
Subject: RE: [Snort-users] Packet Loss on a NIC without TCP/IP bound
Date: Thu, 15 Nov 2001 10:51:38 -0600

I run RH 7.1 using snort on a NIC without an IP address bound to it, and it
works fine.

Just make sure the interface is enabled/up'd (I think this is the ifup
command?)

Hope this helps.
Mike

-----Original Message-----
From: Snort List [mailto:snortlist () hotmail com]
Sent: Thursday, November 15, 2001 10:13 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Packet Loss on a NIC without TCP/IP bound


Hello,

I assume that this problem is because there is not an IP address bound to
the NIC, but when I run Snort-1.8.1 on RH 7.1 Linux, kernel 2.4.13, on a NIC

without an IP address, it show 100% packet loss.  Are my assumptions right?

Thank you,
John

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


CONFIDENTIALITY NOTICE:

************************************************************************

The information contained in this ELECTRONIC MAIL transmission
is confidential.  It may also be privileged work product or proprietary
information. This information is intended for the exclusive use of the
addressee(s).  If you are not the intended recipient, you are hereby
notified that any use, disclosure, dissemination, distribution [other
than to the addressee(s)], copying or taking of any action because
of this information is strictly prohibited.

************************************************************************


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: