[Snort-users] Help with unbound adapter.

Jason Gauthier jgauthier at ...6155...
Tue Jul 2 06:48:47 EDT 2002


Gee, that was stupid.

Thanks. :)


>-----Original Message-----
>From: McCammon, Keith [mailto:Keith.McCammon at ...3497...]
>Sent: Tuesday, July 02, 2002 9:39 AM
>To: Jason Gauthier; Snort at Sourcefourge
>Subject: RE: [Snort-users] Help with unbound adapter.
>
>
>Is the second interface up?
>
>-----Original Message-----
>From: Jason Gauthier [mailto:jgauthier at ...6155...]
>Sent: Tuesday, July 02, 2002 9:04 AM
>To: Snort at Sourcefourge
>Subject: [Snort-users] Help with unbound adapter.
>
>
>Seems kind of an interesting subject line, but...
>
>Pertinent info:
>Snort 1.8
>Linux (2.4.18)
>
>
>Here's what I'm trying to do.
>
>I have a two NICs.
>
>One of them has an IP address on my HOME_NET.
>The other, has no IP address. 
>I mirrored a port on my core router, and plugged it in.
>(I got link)
>
>I try to run snort on that interface, and nothing it logged.
>I'm pretty sure I'm not running it with the correct parameters:
>
>/opt/snort/bin/snort -i eth1 -D -de -l /var/snort/inside -c
>/opt/snort/etc/snort.conf
>
>
>Which, logs nothing.
>I tried adding -v and removed the -D and -l options.
>But also, nothing is logged to my terminal session.
>
>Any advice?
>
>
>-------------------------------------------------------
>This sf.net email is sponsored by:ThinkGeek
>Welcome to geek heaven.
>http://thinkgeek.com/sf
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.sourceforge.net
>Go to this URL to change user options or unsubscribe:
>https://lists.sourceforge.net/lists/listinfo/snort-users
>Snort-users list archive:
>http://www.geocrawler.com/redir-sf.php3?list=snort-users
>




More information about the Snort-users mailing list