[Snort-users] Dynamic Addresses
blake at ...319...
Tue Apr 10 12:55:43 EDT 2001
Snort allows you to use the -S switch from the command line to specify
variables that override the config file. For example
Something like this (im on a linux 2.2.16 box):
-S HOME_NET=`ifconfig eth0|grep "inet addr"|cut -f2 -d":"|cut -f1 -d" "`
It's ulgy, but it should work.
You might also want to check out the script written by Sten Kalenda
Apeldoorn, which can be found at:
Hope this helps.
On Mon, 9 Apr 2001, Phil wrote:
> Given the new info that if you specify you're external
> interface your HOME_NET var needs to be you're extrnal
> IP and your EXTERNAL_NET var needs to be everything
> else... how do you handle dynamic IPs?
> I'm not sure exactly how Snort parses it's config
> file, but I'm guessing it doens't work like a shell
> script and I therefore cannot just use a `ifconfig
> ...` command and grep/xarg/etc. the IP out.
> Do You Yahoo!?
> Get email at your own domain with Yahoo! Mail.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users