Re: Snort & Acid

[Colin.Slevin () transwareplc com]

I am having another problem , I have two network cards on my machine one
for sniffing and on for normal network activity . When I type snort -W I
get these two NIC cards which are correct . But the card I want to sniff is
the second but snort is using the first even when I specify the second in
the snort .conf . What do I do to change the situation . I know that one
should be in promiscious mode but all traffic seems to be directed through
this card . I using snort on Win2k with mysql and acid and obviously php.
\Device\NPF_{37B8DFB9-9F3C-4585-BF8C-F65A3422564B} (Intel 8255x-based
Integrated Fast Ethernet) normal traffic  (IP 10.0.0.46)
\Device\NPF_{185E1F8A-0E33-4774-9193-076063E4A164} (Compac
Ethernet/FastEthernet or Gigabit NIC) promiscious mode (IP 10.0.0.47) I
don't think that this should have an IP address so if you can also tell me
how to get this to sniff without an IP address that would great too ...


Thanks alot

Colin




-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users