[Snort-users] promisc help

Paras pradhan paras at ...9622...
Mon Jul 7 23:50:29 EDT 2003


hi all

i am runnning snort with acid in RH 9 box with the command:

snort -c /usr/local/src/snort-2.0.0/etc/snort.conf -D

now when i do a test from other host to that machine(.156) by:

nmap -p 25,53 -sX -P0 -D 1.2.3.4,5.6.7.8 x.x.x.156.

Snort is showing the correct result.

Now when i do test to other macchine in the same netwrok snotr is not
alerting.


I put the eth0 of the machine to promis mode by doing:


ifconfig eth0 prmisc.


But snort is not alerting traffic of my network. expect abuse to the
machine itself only.


Thanks in adv.
Paras pradhan
Systems Dept.
Bajranet PVT LTD
Kathmandu
Nepal.






More information about the Snort-users mailing list