[Snort-users] dynamic ip and snort

Andreas Hasenack andreas at ...814...
Sun Nov 19 14:28:51 EST 2000


Em Sun, Nov 19, 2000 at 06:44:47PM +0700, Fyodor escreveu:
> On Sat, Nov 18, 2000 at 11:24:20AM -0800, Dragos Ruiu wrote:
> > On Sat, 18 Nov 2000, Thomas Walpuski wrote:
> > > how to define $HOME_NET for using snort on a host with a dynamic ip.

> actually that is what we made '$<interface_name>_ADDRESS variable.. so, if you're
> running snort on ppp0 interface you should have something like
> 
> var HOME_NET $ppp0_ADDRESS

But snort still has to be restarted if the connection drops, right? And *after* the
interface is up again, right?




More information about the Snort-users mailing list