Subject: [Snort-users] IPless interface on Debian...

Patrick Sitton psitton at ...11198...
Thu Feb 12 06:54:00 EST 2004

I don't define my ids ports in my interfaces file at all, just my
access interface. I just bring up my IDS interfaces as needed in my
snort start up script with ifconfig eth1 up promisc.

This is the way I do it on all my debian based snort boxes. Eth0 is my
access port and up to 3 nic cards are brought up manually as needed.
There may be a better way but it's the way it do it, at leaswt until I
can find a better way. My interfaces file looks like this on all my

auto lo
iface lo inet loopback
auto eth0 inet static

Thursday, February 12, 2004, 3:00:57 AM, you wrote:

HWan> Hello Snort-Users,

HWan> I hope this isn't redundant, but the archives seem to be down right now.

HWan> I have two NIC's, eth1 is for my management network, and eth0 is for
HWan> sniffin'. I want eth0 *not* to have a IP address. This worked fine in
HWan> RedHat, but since they eol'ed it I'm migrating to Debian, and I'm a
HWan> little green. How is this done in Debian?
HWan> Many Thanks,
HWan> Tobias

HWan> Tobias,
HWan> just try the following in /etc/network/interfaces:

HWan> user at ...8349...:~$ less /etc/network/nterfaces
HWan> #/etc/networl/interfaces  -- configuration file for ifup(8), ifdown(8)

HWan> # The loopback interface
HWan> auto lo
HWan> iface lo inet loopback

HWan> auto eth1

HWan> iface eth1 inet static
HWan>      address
HWan>      netmask
HWan>      broadcast
HWan>      gateway

HWan> auto eth0 inet static
HWan>      address
HWan>      netmask

HWan> #  end /etc/network/interfaces

HWan> hope that explains enough...

HWan> cu
HWan> holgi

HWan> -------------------------------------------------------
HWan> SF.Net is sponsored by: Speed Start Your Linux Apps Now.
HWan> Build and deploy apps & Web services for Linux with
HWan> a free DVD software kit from IBM. Click Now!
HWan> _______________________________________________
HWan> Snort-users mailing list
HWan> Snort-users at
HWan> Go to this URL to change user options or unsubscribe:
HWan> Snort-users list archive:

 Patrick Sitton
 mailto:psitton at ...11198...
 The Bat! 2.02.3 CE

More information about the Snort-users mailing list