Snort mailing list archives
I need help with network address setup
From: "Steve Jacobsen" <steve () ECI-EQUITY COM>
Date: Tue, 30 Jul 2002 08:26:00 -0500
I'm just getting snort setup and have run some probes against my network but it only sends alerts on the IP address of my snort machine. I am using IDScenter 1.09 Beta2 to configure and run snort. Under log settings I set home network to: xxx.xxx.xxx.78/32 (the IP address of my snort machine) and I get some alerts. Under the IDS rules I set the Network vaiables as follows: Home_net xxx.xxx.xxx.64/27 (I have the 64 to 95 range) External_Net any Smtp $home_net Http_servers $home_net Sql_servers $home_net Dns_servers $home_net What am I doing wrong? /Steve ------------------------------------------------------- This sf.net email is sponsored by: Dice - The leading online job board for high-tech professionals. Search and apply for tech jobs today! http://seeker.dice.com/seeker.epl?rel_code1 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- I need help with network address setup Steve Jacobsen (Jul 30)
- Re: I need help with network address setup Scott Nursten (Jul 30)
- Re: I need help with network address setup Erek Adams (Jul 30)
- <Possible follow-ups>
- RE: I need help with network address setup Steve Jacobsen (Jul 30)
- Plugin and Preprocessor RR (Jul 30)