[Snort-users] snort on stealth mode

Denis Ducamp Denis.Ducamp at ...199...
Thu May 31 09:02:25 EDT 2001


On Thu, May 31, 2001 at 05:22:16PM +0800, manoj wrote:
> Hi,
> 
> I just started working on snort, wondering how to make snort box in stealth mode ?

http://www.snort.org/FAQ.html#q24

--faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q:  How do I setup snort on a 'stealth' interface?

A:  Bring up the interface without an IP address on it.
    http://www.geocrawler.com/archives/3/4890/2000/9/0/4399696/
A:  Use an ethernet tap, or build your own 'receive-only' ethernet cable.
    http://www.robertgraham.com/pubs/sniffing-faq.html#receive-only

--faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--

Denis Ducamp.

-- 
 Denis.Ducamp at ...199... --- Hervé Schauer Consultants --- http://www.hsc.fr/
Owl/snort/hping/dsniff en français  http://www.groar.org/~ducamp/#sec-trad
            Owl en français    http://www.openwall.com/Owl/fr/
 Du bon usage de ... http://usenet-fr.news.eu.org/fr-chartes/rfc1855.html




More information about the Snort-users mailing list