[Snort-users] dynamic ip and snort

Fyodor fygrave at ...121...
Sun Nov 19 06:44:47 EST 2000


On Sat, Nov 18, 2000 at 11:24:20AM -0800, Dragos Ruiu wrote:
> On Sat, 18 Nov 2000, Thomas Walpuski wrote:
> > how to define $HOME_NET for using snort on a host with a dynamic ip.
> 
> There are more elaborate scripts... some of which you may even find
> in the archives of this newsgroup.
> 
> The most straightforward first thing is to use the "-h" home net command
> line option to set this value from something you check right before
> you start snort.



actually that is what we made '$<interface_name>_ADDRESS variable.. so, if you're
running snort on ppp0 interface you should have something like


var HOME_NET $ppp0_ADDRESS

in your snort.conf file.




More information about the Snort-users mailing list