Snorby Snort or Barnyard scrambles IPs

[Ilja Schumacher <ilja.schumacher () gmail com>]

Hey fellows,

I have just finished setting up snort barnyard mysql pulledpork and snorby
in an ARM5 box.

Everything works very nice except that snorby shows totally scrambled IPS
for source and destination.

Example:
Real source 82.56.35.23
Real destination 192.168.1.13

Snorby shows:
Source 82.56.XX1.13
Destination 192.168.X35.23

X is 1 most of the time.

Setup is:
Internet. Firewall/NAT. LanportMirror. Snort.

Do you have a clue what may cause such strange behaviour?

Cheers
Ilja

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!