Snort mailing list archives

RE: Difficulty setting HOME_NET to my interface address


From: "L. Christopher Luther" <CLuther () Xybernaut com>
Date: Sun, 16 Feb 2003 23:09:29 -0500

As noted in one of my previous posts, DefineIfaceVar() (at least in my
testing w/ Snort 1.8.6 and 1.8.7) actually creates a variable called
'$\_ADDRESS', not '$_ADDRESS'.  

I've not tested Chris Reid's quoting suggestion, but you could try:  

    var HOME_NET $(\_ADDRESS)

and see what happens.  Good luck.  

Cheers! 
- Christopher 


-----Original Message-----
From: Paulo Santos Perneta [mailto:pperneta () netmadeira com]
Sent: Sunday, February 16, 2003 7:07 PM
To: Chris Reid; Erek Adams
Cc: Snort-Users (E-mail); L. Christopher Luther
Subject: Re: [Snort-users] RE: Difficulty setting HOME_NET to my
interface address


----- Original Message -----
From: "Chris Reid" <Chris.Reid () CodeCraftConsultants com>


So, if you are using an existing snort distribution from before today, use
$_ADDRESS.  If you update your source code as of today, from either a
daily


When I use:

var HOME_NET $_ADDRESS

I get:

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR => Undefined variable name: (./snort.conf:47): _ADDRESS
Fatal Error, Quitting..

This does not seems to be working either :-\

Paulo Santos Perneta <pperneta () netmadeira com>



Current thread: