[Snort-devel] How to get the name of the current interface?

Justin Heath justin.heath at ...2499...
Mon Jun 30 12:01:58 EDT 2008


Assuming your on a Linux or BSD box it should be /var/log/messages.



Cheers,
Justin

On Mon, Jun 30, 2008 at 11:59 AM, Salvo Danilo Giuffrida
<salvodanilogiuffrida at ...2499...> wrote:
> And what is that, sorry?
>
> 2008/6/30 Justin Heath <justin.heath at ...2499...>:
>> The interface should also be listed in your systems messages file.
>>
>> Cheers,
>> Justin
>>
>> On Mon, Jun 30, 2008 at 9:12 AM, Salvo Danilo Giuffrida
>> <salvodanilogiuffrida at ...2499...> wrote:
>>> Hello, the function GetIP(char*) returns the IP assigned to the
>>> interface whose name is specified as the 1st parameter. But, how can I
>>> get the name of the interface Snort is currently sniffing to (apart
>>> from parsing the command line or the snort.conf file)?
>>> Thanks
>>> On a side note, I think I have solved that problem with alerts
>>> generated by threads...Basicly, if I use SetEvent() and
>>> CallAlertFuncs() they show up, but I need to specify a Packet* on the
>>> second function, that's why I think to generate a fake packet on the
>>> wire, and have the preprocessor always use that to pass it to the
>>> CallAlertFuncs function...
>>>
>>> -------------------------------------------------------------------------
>>> Check out the new SourceForge.net Marketplace.
>>> It's the best place to buy or sell services for
>>> just about anything Open Source.
>>> http://sourceforge.net/services/buy/index.php
>>> _______________________________________________
>>> Snort-devel mailing list
>>> Snort-devel at lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/snort-devel
>>>
>>
>




More information about the Snort-devel mailing list