[Snort-users] please give me a sugestion
Ks, Mithun (Corporate)
Mithun.Ks at ...11834...
Fri Feb 25 05:54:34 EST 2005
I am new to snort. i configured bpf filter and added my trusted ip in that for not to make alerts. the bpf filter is under /etc/snort directory. after that by applying -F option i restarted snort. but it is not working fine. when i went and check under message file in log directory i can see this message. eth2 left promisciuos mode. i think when i am using bpf filter it is leaving promiscious mode. can anyone give me a suggestion in this to make it right..........
More information about the Snort-users