[Snort-users] Snort on Linux with no IP

Tony Fraser tony at ...11256...
Mon Feb 23 09:41:03 EST 2004


MessageIf this is actually the second NIC in the box you might need to load
the appropiate kernel module/driver:

modprobe <driver name>

and or modify your /etc/modules.conf appropriatly.

----- Original Message ----- 
From: Grejda, Eric
To: 'Brian McNeilly' ; snort-users at lists.sourceforge.net
Sent: Monday, February 23, 2004 5:35 AM
Subject: RE: [Snort-users] Snort on Linux with no IP


How many network interfaces do you have in your Snort sensor?  On Linux
machines, interface numbering starts at zero.  If you only have one NIC
installed, you'd have to reference eth0:

ifconfig eth0 up
--
Eric Grejda

-----Original Message-----
From: Brian McNeilly [mailto:bmcneilly at ...9344...]
Sent: Friday, February 20, 2004 7:23 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Snort on Linux with no IP


I apologise in advance for the newbie question, which undoubtedly has been
discussed to death already. Before you send me to the FAQ, here is the
relevant snippit from there:

3.1 How do I setup snort on a 'stealth' interface?

  *BSD and Linux:

    ifconfig eth1 up

OK, so I do this and the response I get is: eth1: unknown interface: No such
device

Can anyone elaborate on the rather limited response found in the FAQ for
this issue? Is seems to me that many people have asked about this before,
but there never has been an appropriate explanation put into the FAQ (I've
just spent the entire afternoon reading mail archives to no avail). Sorry if
I'm just stupid, but the FAQ isn't really helpful on this issue.





More information about the Snort-users mailing list