[Snort-users] Snort will not detect anything on stealth interface unless I assign IP

Edin Dizdarevic edin.dizdarevic at ...7509...
Mon Jul 19 08:44:04 EDT 2004


I would also deactivate the arp protocol (-arp). No need to send the arp
requests... ;)

But, back to the OP: Try running snort in the sniffer mode first (-vde
-i ethX). If you see packets running over your screen, then your
configuration is broken. Check the $HOME_NET stuff then.

Regards,

Edin

Paul Schmehl wrote:
...
> ifconfig eth1 up is all you need.
> 
-- 
Edin Dizdarevic
iAS interActive Systems




More information about the Snort-users mailing list