[Snort-users] stealth interface
mkettler at ...4108...
Mon Apr 7 13:19:09 EDT 2003
This is in the FAQ you read, you just failed to read the first answer and
skipped straight to the third one.
3.1 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q: How do I setup snort on a 'stealth' interface?
A: Bring up the interface without an IP address on it. See FAQ 3.2...
<snipped off the other answers involving read-only cables and taps>
3.2 --faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q: How do I run snort on an interface with no IP address?
A: ifconfig eth1 up
At 03:26 PM 4/7/2003 -0400, d_greenjr wrote:
>Can someone tell me or give me the URL on how to create an interface with
>no ipaddr (stealth), on a linux [RH8] system? (Not the receive only
>cable-I saw that in the snort FAQs) I have searched the Internet and the
>snort archives but have not found a message/page that describes what to
>do-only the end results. Thanks
More information about the Snort-users