[Snort-users] promisc help
paras at ...9622...
Mon Jul 7 23:50:29 EDT 2003
i am runnning snort with acid in RH 9 box with the command:
snort -c /usr/local/src/snort-2.0.0/etc/snort.conf -D
now when i do a test from other host to that machine(.156) by:
nmap -p 25,53 -sX -P0 -D 22.214.171.124,126.96.36.199 x.x.x.156.
Snort is showing the correct result.
Now when i do test to other macchine in the same netwrok snotr is not
I put the eth0 of the machine to promis mode by doing:
ifconfig eth0 prmisc.
But snort is not alerting traffic of my network. expect abuse to the
machine itself only.
Thanks in adv.
Bajranet PVT LTD
More information about the Snort-users