RE: Stealth Interface

[Alejandro Flores <alejandro.flores () triforsec com br>]

        Hello,

        Linux 9 = Redhat, mandrake, slackware?
        Did you installed from rpm? If so, edit the /etc/sysconfig/snort and
change INTERFACE variable.
        To start eth0 without an IP address, just edit
/etc/sysconfig/network-scripts/ifcfg-eth0 and set:

DEVICE=eth0
ONBOOT=yes
BOOTPROTO=static
TYPE=Ethernet

Regards,
Alejandro


> -----Original Message-----
> From: b7time b7time [mailto:b7time () hotmail com] 
> Sent: Friday, July 09, 2004 10:09 AM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Stealth Interface
>
> I have Snort running on Linux 9 with two interfaces. Eth0 has an IP
> address assigned and is capturing traffic. However I would like to use
> instead eth1 without an IP address that is attached to a hub on the
> external network. How do I 'unbind' Snort from using eth0 (which I would
> use for management) and instead use eth1 (no IP address) in stealth
> mode?
>
> Thanks in advance.
>
> Vito



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users