Snort mailing list archives
no ip on interface?
From: "T.Shaw" <hshaw () safeweb com>
Date: Thu, 12 Sep 2002 16:10:47 +0000
Hello all.. this might be a stupid question.. but here goes..I have snort 1.8.7 up and running loggin to a pgsql database. I haven't installed ACID as of yet. I have configured snort to look at all traffic at an interface that currently doesnt have an ip assigned to it. Basically the interface is just up ( this is a linux box with two interfaces on it) What im wondering is even tho i have no ip on the interface, will snort still be able to dump alerts and data into the database? Using a normal sniffer (ethereal, tcpdump) i can view the traffic on the interface by specifying the (usually) the -i parameter. If i gave snort a smiliar parameter.. everything should be fine correct? Would this screw up reporting and alerts? Thanks! Terrelle Shaw ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- no ip on interface? T.Shaw (Sep 12)
- Re: no ip on interface? Demetri Mouratis (Sep 12)
- Re: no ip on interface? Michael Boman (Sep 12)
- Re: no ip on interface? Erek Adams (Sep 12)