[Snort-users] ethernet without IP

Abu Emran Abu Bakar aeab at ...3523...
Fri Sep 21 01:31:03 EDT 2001


tq
yes i've did it with -i still the warning appears

>Initializing Network Interface eth1
> >WARNING: OpenPcap() device eth1 network lookup:
> >         SIOCGIFADDR: eth1: Cannot assign requested
> >address
> >Decoding Ethernet on interface eth1
> >
> >         --== Initialization Complete ==--
> >
> 


did a ps -ax and ifconfig yup snort running and promisc 
yet no logging?..even tough i did few  scanning..just 
to test..




Quoting akshaye kalkura <draci at ...125...>:

> 
> hi,
> 
> while executing snort, also mention the interface u 
want snort to listen on
> 
> there is a -i option in it....pls chk that..u cld 
give soemthing like this 
> 
> snort -i eth0 -c snort.conf (this is for the ethernet 
with ip)
> 
> if u want snort to listen on the card which has no 
ip, then u will have to 
> bring that interface down and then up: ifconfig eth1 
down/up, then
> 
> snort -i eth1 -c snort.conf
> 
> ak.
> 
> >From: Abu Emran Abu Bakar <aeab at ...3523...>
> >Reply-To: aeab at ...3523...
> >To: snort-users at lists.sourceforge.net
> >Subject: [Snort-users] ethernet without IP
> >Date: Thu, 20 Sep 2001 16:38:56 -0800 (GMT)
> >
> >Hi all, i am a newbie
> >I am installing snort on my machine with two network
> >interfaces. one without IP, read the snort's FAQ and
> >followed it (regarding without IP)
> >This is how i am executing it:
> >./snort -D -d  -h xxx.xxx.0.0/16 -c snort.conf
> >
> >and this is the result:
> >
> >Initializing Network Interface eth1
> >WARNING: OpenPcap() device eth1 network lookup:
> >         SIOCGIFADDR: eth1: Cannot assign requested
> >address
> >Decoding Ethernet on interface eth1
> >
> >         --== Initialization Complete ==--
> >
> >
> >however i cannot see any logging from snort, have 
tried
> >few scanning but snort did not logged ..
> >
> >please help ?.
> >
> >
> >_______________________________________________
> >Snort-users mailing list
> >Snort-users at lists.sourceforge.net
> >Go to this URL to change user options or unsubscribe:
> >https://lists.sourceforge.net/lists/listinfo/snort-
users
> >Snort-users list archive:
> >http://www.geocrawler.com/redir-sf.php3?list=snort-
users
> 
> 
> 
________________________________________________________
_________
> Get your FREE download of MSN Explorer at 
http://explorer.msn.com/intl.asp
> 
> 




More information about the Snort-users mailing list