[Snort-users] Dynamic Addresses

Rino Mardo rmardo at ...1751...
Tue Apr 10 12:14:20 EDT 2001


whatever happened to "int_address"?

you could do this:

var HOME_NET xl0_address

AFAIK.  Correct me if I'm wrong.



----- Original Message ----- 
From: "Erek Adams" <erek at ...577...>
To: "Phil" <foo_bar_00 at ...131...>
Cc: "snort users" <snort-users at lists.sourceforge.net>
Sent: Tuesday, April 10, 2001 12:15 PM
Subject: Re: [Snort-users] Dynamic Addresses


> On Mon, 9 Apr 2001, Phil wrote:
> 
> > Given the new info that if you specify you're external
> > interface your HOME_NET var needs to be you're extrnal
> > IP and your EXTERNAL_NET var needs to be everything
> > else... how do you handle dynamic IPs?
> >
> > I'm not sure exactly how Snort parses it's config
> > file, but I'm guessing it doens't work like a shell
> > script and I therefore cannot just use a `ifconfig
> > ...` command and grep/xarg/etc. the IP out.
> >
> 
> Have a look at 'address_config.sh' in the snort.org download section.
> 
> http://www.snort.org/Files/address_config.sh
> 
> I think it might do what you want.  It was written for 1.5 or 1.6 but it
> should still work.
> 
> -----
> Erek Adams
> Nifty-Type-Guy
> TheAdamsFamily.Net
> 
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 





More information about the Snort-users mailing list