[Snort-users] Pinging all IP's

Edin Dizdarevic edin.dizdarevic at ...7509...
Fri Aug 20 07:21:09 EDT 2004


Packets sent from localhost addressing to any of its own IPs will fall
back to the loopback interface. It has nothing to do with if you have
your NICs connected to the carrier or not. Try running tcpdump on lo and
ping your NICs and you'll see. The packets will not leave the host.

For more information on loopback se Stevens, The TCP/IP Protocoll Suite.


Don Merrifield wrote:

> Hello Everyone, I don't post many questions, but I read most of the 
> postings. I have a issue I believe to be a problem. I am installing
> Snort (and several of the extras) on a RH 9 box, 550Mhz AMD, 192 MB
> ram, 10 gig hard drive and 3 Nic's. IP addresses assigned to all
> Nic's. -151 -152. . The issue I am seeing
> is with only one Nic plugged into the network I can still ping all
> the IP addresses. To me this doesn't seem correct. I'm not an expert
> by any means, but this doesn't seem right. Is there a config file I
> need to edit? Any help would be appreciated.
> Thanks in advance,
> Don Merrifield
> Merrifield Consulting

Edin Dizdarevic

More information about the Snort-users mailing list