[Snort-users] Couldn't resolve hostname HOME_NET
dotslash at ...1760...
Thu Apr 26 02:04:52 EDT 2001
oh didn't noticed that this thread is still active. well to inform you guys
i've found that problem:
var EXTERNAL_NET HOME_NET
forgot the $ sign in HOME_NET :-(
thanks to all who replied.
----- Original Message -----
From: "Josh Oshiro" <josh at ...155...>
To: "dotslash" <dotslash at ...1760...>
Cc: "Erek Adams" <erek at ...577...>; "Snort"
<snort-users at lists.sourceforge.net>
Sent: Thursday, April 26, 2001 3:58 AM
Subject: Re: [Snort-users] Couldn't resolve hostname HOME_NET
> dotslash wrote:
> > hehe. well i'm having coffee now and this is a good time to start fixing
> > snort again.
> > i checked and my snort.conf is still the same. it has both HOME_NET and
> > EXTERNAL_NET defined in it using my networks ip address (for HOME_NET).
> > bugger i don't think snort would need to resolve hostname before it
> > does it? i have firewalling in the same box and i can telnet, ping,
> > everywhere from it so there's no question that the box can't resolve
> > well, i'll finish coffee first then d/l snort again. hell maybe i'll
> > 1.8 then...l8rs
> > ----- Original Message -----
> > From: "Erek Adams" <erek at ...577...>
> > To: "dotslash" <dotslash at ...1760...>
> > Cc: "Snort" <snort-users at lists.sourceforge.net>
> > Sent: Monday, April 23, 2001 6:32 PM
> > Subject: Re: [Snort-users] Couldn't resolve hostname HOME_NET
> > <snipped...>
> > > >
> > > > Apr 23 15:58:03 snortle snort: ERROR
> > /usr/local/snort/rules/exploit.rules
> > > > (4) => Couldn't resolve hostname HOME_NET
> > >
> > > [...snip...]
> > >
> > > Well, it sounds like you don't have HOME_NET defined in your
> > But,
> > > from what you said, you already had a snort.conf that was 'edited' and
> > ready.
> > >
> > > Hrm... Did you unpack snort in that directory? If so, the snort.conf
> > from
> > > the tarball might have overwrote your snort.conf.
> > >
> > > Please note: This letter was composed before having any coffee, so it
> > might
> > > not be to clueful. ;-)
> > >
> > > -----
> > > Erek Adams
> > > Nifty-Type-Guy
> > > TheAdamsFamily.Net
> > >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > http://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> Can we see your snort.conf?
> josh at ...155...
> Snort Support
> Silicon Defense
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users