[Snort-users] Stealth Interface
alejandro.flores at ...11361...
Thu Jul 15 04:28:07 EDT 2004
Linux 9 = Redhat, mandrake, slackware?
Did you installed from rpm? If so, edit the /etc/sysconfig/snort and
change INTERFACE variable.
To start eth0 without an IP address, just edit
/etc/sysconfig/network-scripts/ifcfg-eth0 and set:
> -----Original Message-----
> From: b7time b7time [mailto:b7time at ...125...]
> Sent: Friday, July 09, 2004 10:09 AM
> To: snort-users at lists.sourceforge.net
> Subject: [Snort-users] Stealth Interface
> I have Snort running on Linux 9 with two interfaces. Eth0 has an IP
> address assigned and is capturing traffic. However I would like to use
> instead eth1 without an IP address that is attached to a hub on the
> external network. How do I 'unbind' Snort from using eth0 (which I would
> use for management) and instead use eth1 (no IP address) in stealth
> Thanks in advance.
More information about the Snort-users