[Snort-users] Problems with IP-less interface

McCammon, Keith Keith.McCammon at ...3497...
Fri Feb 22 10:32:08 EST 2002

1) If xl0 has no IP, then why is your monitor port connected to xl1?

2) How are you bringing up xl0?

3) What is the message when Snort dies?

-----Original Message-----
From: spyguy703 [mailto:spyguy703 at ...131...]
Sent: Friday, February 22, 2002 1:14 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Problems with IP-less interface

I have a snort box sitting in a DMZ behind a firewall.
The snort box is running FreeBSD.
I have configured xl1 with a REAL IP and xl0 without an IP.

I have configured a 'port monitor' port on a Cisco 2924XL and attached
xl1 to 

I keep getting 'xl0 network down' errors. Ifconfig shows the link is
Snort runs, but then dies.

Any ideas?

Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list