[Snort-users] var HOME_NET

alexus ml at ...1718...
Wed Jan 9 14:36:02 EST 2002


in solaris i have

# ifconfig -a
lo0: flags=1000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4> mtu 8232 index 1
        inet 127.0.0.1 netmask ff000000 
le0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
        inet 64.32.229.174 netmask fffffff8 broadcast 64.32.229.175
        ether 8:0:20:7a:b0:58 
le0:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
        inet 64.32.229.173 netmask fffffff8 broadcast 64.32.229.175
# 

can i have in snort.conf

var HOME_NET $le0,$le0:1 ?

or i have to put just $le0 and it'll figure out the rest?







More information about the Snort-users mailing list