Snort mailing list archives

Re: Undefined variable name eth0_ADDRESS


From: Joel Esler <joel.esler () sourcefire com>
Date: Thu, 21 Sep 2006 08:21:20 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Remus,

I suggest we find a better way to do what you are trying to do.  Using
an entire card defined as HOME_NET is not recommended.

You should definitely set your HOME_NET to be your IP range.  (var
HOME_NET [192.168.0.0/16]) for example.  What are you trying to do, and
maybe we can help you find a better solution.

Joel

Remus wrote:
----- Original Message ----- 
From: "Paul Melson" <pmelson () gmail com>
To: "'Snort'" <snort-users () lists sourceforge net>
Sent: Wednesday, September 20, 2006 5:39 PM
Subject: [Snort-users] perfmonitor and pmgraph

Hi folks,

I'm trying to run snort 2.6.0.2 and such errors:
snort[10786]: FATAL ERROR: Undefined variable name: 
(/etc/snort/snort.conf:34): eth1_ADDRESS
snort[10833]: FATAL ERROR: Undefined variable name: 
(/etc/snort/snort.conf:51): eth0_ADDRESS

In my config file  I have:
var HOME_NET $eth1_ADDRESS
var EXTERNAL_NET $eth0_ADDRESS

Those variables work with 2.4.x snort but not with 2.6.x

Any ideas?


Cheers

Remus




-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


- --
+---------------------------------------------------------------------+
Joel Esler           Senior Security Consultant         1-706-627-2101
Sourcefire    Security for the /Real/ World -- http://www.sourcefire.com
Snort - Open Source Network IPS/IDS -- http://www.snort.org
GPG Key http://demo.sourcefire.com/jesler.pgp.key
AIM: eslerjoel          Gtalk: eslerj           Yahoo: eslerjoel
+---------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFFEoPAKbCSyXHckt4RAp7YAKCGjM7jXKfrglDFH6/pdF10MqTibgCcCnwP
gRGLb24+6e9tAVadLAubwas=
=JX4p
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: