Re: Snort will not detect anything on stealth interface unless I assign IP

[Edin Dizdarevic <edin.dizdarevic () interActive-Systems de>]

I would also deactivate the arp protocol (-arp). No need to send the arp
requests... ;)

But, back to the OP: Try running snort in the sniffer mode first (-vde
-i ethX). If you see packets running over your screen, then your
configuration is broken. Check the $HOME_NET stuff then.

Regards,

Edin

Paul Schmehl wrote:
...
> ifconfig eth1 up is all you need.
--
Edin Dizdarevic
iAS interActive Systems


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users