[Snort-users] var HOME_NET under Linux

Thomas Bechtold CharlieBlue at ...348...
Mon Jun 23 10:35:14 EDT 2003


Hi, 
I have a problem with my HOME_NET Variable under LInux.
I want to use my Interfaces for the Sensors.

Here is the Line from my snort.conf
#Home-Net
var HOME_NET $eth0_ADDRESS

When i start Snort i get the following error:


snort -c /etc/snort/snort.eth0.conf
Running in IDS mode
Log directory = /var/log/snort

Initializing Network Interface ppp0

        --== Initializing Snort ==--
Initializing Output Plugins!
Decoding raw data on interface ppp0
Initializing Preprocessors!
Initializing Plug-ins!
Parsing Rules file /etc/snort/snort.eth0.conf

+++++++++++++++++++++++++++++++++++++++++++++++++++
Initializing rule chains...
ERROR: Undefined variable name: (/etc/snort/snort.eth0.conf:13): eth0_ADDRESS
Fatal Error, Quitting..


Thats not the standard-config-file. I wrote my own file, but i think there are 
no dependecies for the var HOME_NET, right?

Tom





More information about the Snort-users mailing list