RE: Snort Sniffing vs. Snort Database

["Jan van den Berg" <jan () e-commercepark com>]

Thanks for the input, it cleared up a lot!

But this however is confusing: 

"Quite often, you want to use an interface to sniff with that has no ip
for
security.  With no IP you can't send out alerts." 

Could you explain this a little more, because if the machine has no IP
how am I gonna write the data to another machine; I can't make a
connection (unless serial or otherwise). And what do you mean with, with
no IP you can't send out alerts?

Regards, 

Jan van den Berg






-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users