[Snort-users] Dynamic Addresses
rmardo at ...1751...
Tue Apr 10 12:14:20 EDT 2001
whatever happened to "int_address"?
you could do this:
var HOME_NET xl0_address
AFAIK. Correct me if I'm wrong.
----- Original Message -----
From: "Erek Adams" <erek at ...577...>
To: "Phil" <foo_bar_00 at ...131...>
Cc: "snort users" <snort-users at lists.sourceforge.net>
Sent: Tuesday, April 10, 2001 12:15 PM
Subject: Re: [Snort-users] Dynamic Addresses
> On Mon, 9 Apr 2001, Phil wrote:
> > Given the new info that if you specify you're external
> > interface your HOME_NET var needs to be you're extrnal
> > IP and your EXTERNAL_NET var needs to be everything
> > else... how do you handle dynamic IPs?
> > I'm not sure exactly how Snort parses it's config
> > file, but I'm guessing it doens't work like a shell
> > script and I therefore cannot just use a `ifconfig
> > ...` command and grep/xarg/etc. the IP out.
> Have a look at 'address_config.sh' in the snort.org download section.
> I think it might do what you want. It was written for 1.5 or 1.6 but it
> should still work.
> Erek Adams
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users