Snort mailing list archives

RE: Problems with IP-less interface


From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Fri, 22 Feb 2002 13:31:17 -0500

1) If xl0 has no IP, then why is your monitor port connected to xl1?

2) How are you bringing up xl0?

3) What is the message when Snort dies?

-----Original Message-----
From: spyguy703 [mailto:spyguy703 () yahoo com]
Sent: Friday, February 22, 2002 1:14 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Problems with IP-less interface


I have a snort box sitting in a DMZ behind a firewall.
The snort box is running FreeBSD.
I have configured xl1 with a REAL IP and xl0 without an IP.

I have configured a 'port monitor' port on a Cisco 2924XL and attached
xl1 to 
it.

I keep getting 'xl0 network down' errors. Ifconfig shows the link is
active. 
Snort runs, but then dies.

Any ideas?

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: