Re: stealth mode and openbsd 3.3

[Erek Adams <erek () snort org>]

On Fri, 23 May 2003, Bert Beaudin wrote:

> Currently attempting to run snort in stealth mode on openbsd 3.3. Snort
> 2.0.0 built from source. I have the interface sis0 up.
>
>
> sis0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu
> 1500
>         address: 00:09:5b:06:63:f8
>         media: Ethernet autoselect (100baseTX full-duplex)
>         status: active
>         inet6 fe80::209:5bff:fe06:63f8%sis0 prefixlen 64 scopeid 0x2

[...snip...]

> rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         address: 00:30:84:3e:69:8d
>         media: Ethernet autoselect (100baseTX full-duplex)
>         status: active
>         inet 192.168.20.13 netmask 0xffffff00 broadcast 192.168.20.255
>         inet6 fe80::230:84ff:fe3e:698d%rl0 prefixlen 64 scopeid 0x1

[...snip...]

> What am I doing wrong? Any help would be great.
> PS both interfaces are attacahed to the same hub.

Snort is IPv4 only.

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code to make your application fit in a
relational database is painful, don't do it! Check out ObjectStore.
Now part of Progress Software. http://www.objectstore.net/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users