[Snort-users] Packet Loss on a NIC without TCP/IP bound

Snort List snortlist at ...125...
Thu Nov 15 09:47:02 EST 2001


I am receiving alerts but when I stop snort it reports that it has 100% 
packet loss even tho it is logging and sending alerts..


>From: Michael Aylor <maylor at ...1991...>
>To: 'Snort List' <snortlist at ...125...>, snort-users at lists.sourceforge.net
>Subject: RE: [Snort-users] Packet Loss on a NIC without TCP/IP bound
>Date: Thu, 15 Nov 2001 10:51:38 -0600
>
>I run RH 7.1 using snort on a NIC without an IP address bound to it, and it
>works fine.
>
>Just make sure the interface is enabled/up'd (I think this is the ifup
>command?)
>
>Hope this helps.
>Mike
>
>-----Original Message-----
>From: Snort List [mailto:snortlist at ...125...]
>Sent: Thursday, November 15, 2001 10:13 AM
>To: snort-users at lists.sourceforge.net
>Subject: [Snort-users] Packet Loss on a NIC without TCP/IP bound
>
>
>Hello,
>
>I assume that this problem is because there is not an IP address bound to
>the NIC, but when I run Snort-1.8.1 on RH 7.1 Linux, kernel 2.4.13, on a 
>NIC
>
>without an IP address, it show 100% packet loss.  Are my assumptions right?
>
>Thank you,
>John
>
>_________________________________________________________________
>Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>CONFIDENTIALITY NOTICE:
>
>************************************************************************
>
>The information contained in this ELECTRONIC MAIL transmission
>is confidential.  It may also be privileged work product or proprietary
>information. This information is intended for the exclusive use of the
>addressee(s).  If you are not the intended recipient, you are hereby
>notified that any use, disclosure, dissemination, distribution [other
>than to the addressee(s)], copying or taking of any action because
>of this information is strictly prohibited.
>
>************************************************************************


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp





More information about the Snort-users mailing list