[Snort-users] Bug: $eth0_ADDRESS parse error (FIXED?)

Tom Barcellona tdb at ...4177...
Sat Feb 7 12:39:13 EST 2004

I have been having the same problem that a few people have had in the
past regarding the $<interface>_ADDRESS error. I had "EXTERNAL_NET =

Problem was I would always get a Snort parse error. I even tried
removing all the 10.x.x.x networks and leaving $eth0_ADDRESS by itself.
Still didn't work. 

I finally got it to work by putting HOME_NET before EXTERNAL_NET.
Everything parses fine now, no errors. Does this sound right to

More information about the Snort-users mailing list