Snort mailing list archives

RE: stealth interface


From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Mon, 4 Mar 2002 11:54:40 -0500

The $HOME_NET variable should be set to reflect the network that your
Snort sensor is protecting, regardless of interface addresses (or lack
thereof).

-----Original Message-----
From: Basil Saragoza [mailto:snortlst () hotmail com]
Sent: Monday, March 04, 2002 11:48 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] stealth interface


I configure snort to run on the ip-less interface.How should i set the
$HOME_NET?
To $eth1_ADDRESS ....mut it doesn't have an ip...
To the address of the second nic on the machine?
thx.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: