[Snort-users] Snort will not detect anything on stealth interface unless I assign IP
edin.dizdarevic at ...7509...
Mon Jul 19 08:44:04 EDT 2004
I would also deactivate the arp protocol (-arp). No need to send the arp
But, back to the OP: Try running snort in the sniffer mode first (-vde
-i ethX). If you see packets running over your screen, then your
configuration is broken. Check the $HOME_NET stuff then.
Paul Schmehl wrote:
> ifconfig eth1 up is all you need.
iAS interActive Systems
More information about the Snort-users