[Snort-users] Couldn't resolve hostname HOME_NET

dotslash dotslash at ...1760...
Thu Apr 26 02:04:52 EDT 2001


oh didn't noticed that this thread is still active.  well to inform you guys
i've found that problem:

var EXTERNAL_NET  HOME_NET

forgot the $ sign in HOME_NET :-(


thanks to all who replied.



----- Original Message -----
From: "Josh Oshiro" <josh at ...155...>
To: "dotslash" <dotslash at ...1760...>
Cc: "Erek Adams" <erek at ...577...>; "Snort"
<snort-users at lists.sourceforge.net>
Sent: Thursday, April 26, 2001 3:58 AM
Subject: Re: [Snort-users] Couldn't resolve hostname HOME_NET


> dotslash wrote:
> >
> > hehe. well i'm having coffee now and this is a good time to start fixing
> > snort again.
> >
> > i checked and my snort.conf is still the same. it has both HOME_NET and
> > EXTERNAL_NET defined in it using my networks ip address (for HOME_NET).
> > bugger i don't think snort would need to resolve hostname before it
starts
> > does it?  i have firewalling in the same box and i can telnet, ping,
lynx
> > everywhere from it so there's no question that the box can't resolve
names.
> >
> > well, i'll finish coffee first then d/l snort again.  hell maybe i'll
use
> > 1.8 then...l8rs
> >
> > ----- Original Message -----
> > From: "Erek Adams" <erek at ...577...>
> > To: "dotslash" <dotslash at ...1760...>
> > Cc: "Snort" <snort-users at lists.sourceforge.net>
> > Sent: Monday, April 23, 2001 6:32 PM
> > Subject: Re: [Snort-users] Couldn't resolve hostname HOME_NET
> >
> > <snipped...>
> > > >
> > > > Apr 23 15:58:03 snortle snort: ERROR
> > /usr/local/snort/rules/exploit.rules
> > > > (4) => Couldn't resolve hostname HOME_NET
> > >
> > > [...snip...]
> > >
> > > Well, it sounds like you don't have HOME_NET defined in your
snort.conf.
> > But,
> > > from what you said, you already had a snort.conf that was 'edited' and
> > ready.
> > >
> > > Hrm...  Did you unpack snort in that directory?  If so, the snort.conf
> > from
> > > the tarball might have overwrote your snort.conf.
> > >
> > > Please note:  This letter was composed before having any coffee, so it
> > might
> > > not be to clueful.  ;-)
> > >
> > > -----
> > > Erek Adams
> > > Nifty-Type-Guy
> > > TheAdamsFamily.Net
> > >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Can we see your snort.conf?
>
> --
> josh at ...155...
> Snort Support
> Silicon Defense
>
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list