[Snort-devel] Re: snort-1.81-beta5: eth0_ADDRESS substitution

Sven Carstens s.carstens at ...578...
Tue Jul 31 06:12:54 EDT 2001


Hi folks,

when I change snort.c function OpenPcap about line 1477 to
additionaly set localnet and netmask to 0 I always get the
eth0_address substitution to produce 0.0.0.0/0.0.0.0 .
So everything fine with snort, just pcap being a bit behind.
Will dig there further and report if I find something to change.

CU Sven





More information about the Snort-devel mailing list