[Snort-users] Snort on Linux with no IP

James Riden j.riden at ...11179...
Fri Feb 20 17:25:22 EST 2004

Brian McNeilly <bmcneilly at ...9344...> writes:

>    Hi,
>    I apologise in advance for the newbie question, which undoubtedly has
>    been discussed to death already. Before you send me to the FAQ, here
>    is the relevant snippit from there:
>    3.1 How do I setup snort on a 'stealth' interface?
>      *BSD and Linux:
>        ifconfig eth1 up
>    OK, so I do this and the response I get is: eth1: unknown interface:
>    No such device

Can you bring eth1 up in 'normal' mode? cat /proc/pci will give some detail such as:

 Bus  2, device   7, function  0:
    Ethernet controller: Realtek Semiconducto RTL-8139/8139C/8139C (rev 16).
      IRQ 11.
      Master Capable.  Latency=32.  Min Gnt=32.Max Lat=64.
      I/O at 0xc000 [0xc0ff].
      Non-prefetchable 32 bit memory at 0xe2000000 [0xe20000ff].

.. if you need to get/compile drivers for the card.

Can you bring up eth0 (the first NIC Linux discovers) in 'normal' or
stealth modes?

James Riden / j.riden at ...11179... / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/

More information about the Snort-users mailing list