Snort mailing list archives
Re: var HOME_NET under Linux
From: Erek Adams <erek () snort org>
Date: Sat, 28 Jun 2003 15:24:29 -0400 (EDT)
On Sat, 28 Jun 2003, Thomas Bechtold wrote:
Ok, that works. Now I set the Variable HOME_NET in snort.conf to any: var HOME_NET = any and when i start snort, i set the parameter i(interface) to eth0: snort -c /etc/snort/snort.conf -i eth0
If you want to reduce your false postives, change your HOME_NET to: var HOME_NET $eth0_ADDRESS Cheers! ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- var HOME_NET under Linux Thomas Bechtold (Jun 23)
- Re: var HOME_NET under Linux Jason (Jun 23)
- Re: var HOME_NET under Linux Thomas Bechtold (Jun 23)
- Re: var HOME_NET under Linux Roy S. Rapoport (Jun 23)
- Re: var HOME_NET under Linux Erek Adams (Jun 23)
- Re: var HOME_NET under Linux Thomas Bechtold (Jun 27)
- Re: var HOME_NET under Linux Erek Adams (Jun 27)
- Re: var HOME_NET under Linux Thomas Bechtold (Jun 28)
- Re: var HOME_NET under Linux Erek Adams (Jun 28)
- Re: var HOME_NET under Linux Thomas Bechtold (Jun 30)
- Re: var HOME_NET under Linux David Alonso De La Vega Tapage (Jun 30)
- Re: var HOME_NET under Linux Jason (Jun 23)
- <Possible follow-ups>
- RE: var HOME_NET under Linux LaRose, Dallas (Jun 23)
- RE: var HOME_NET under Linux Schmehl, Paul L (Jun 30)