[Snort-users] Doing sniffing on interface without ip-address.

roel at ...47... roel at ...47...
Fri Nov 2 14:54:03 EST 2001


> I am running OpenBSD
> -thanks
> On Fri, 2 Nov 2001 roel at ...47... wrote:
> > Which OS are you running?

ifconfig <ifname> up -arp

Substitute if name with the appropriate name (de0, xl0, wi0 etc.) 

The -arp disables arp resolution, in the unlikely event that a 
perp will try to illicit a response on the interface, this helps.


More information about the Snort-users mailing list