[Snort-users] Undefined variable name eth0_ADDRESS

Joel Esler joel.esler at ...1935...
Thu Sep 21 08:21:20 EDT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Remus,

I suggest we find a better way to do what you are trying to do.  Using
an entire card defined as HOME_NET is not recommended.

You should definitely set your HOME_NET to be your IP range.  (var
HOME_NET [192.168.0.0/16]) for example.  What are you trying to do, and
maybe we can help you find a better solution.

Joel

Remus wrote:
> ----- Original Message ----- 
> From: "Paul Melson" <pmelson at ...11827...>
> To: "'Snort'" <snort-users at lists.sourceforge.net>
> Sent: Wednesday, September 20, 2006 5:39 PM
> Subject: [Snort-users] perfmonitor and pmgraph
> 
> Hi folks,
> 
> I'm trying to run snort 2.6.0.2 and such errors:
> snort[10786]: FATAL ERROR: Undefined variable name: 
> (/etc/snort/snort.conf:34): eth1_ADDRESS
> snort[10833]: FATAL ERROR: Undefined variable name: 
> (/etc/snort/snort.conf:51): eth0_ADDRESS
> 
> In my config file  I have:
> var HOME_NET $eth1_ADDRESS
> var EXTERNAL_NET $eth0_ADDRESS
> 
> Those variables work with 2.4.x snort but not with 2.6.x
> 
> Any ideas?
> 
> 
> Cheers
> 
> Remus
> 
> 
> 
> 
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 

- --
+---------------------------------------------------------------------+
Joel Esler  	     Senior Security Consultant 	1-706-627-2101
Sourcefire    Security for the /Real/ World -- http://www.sourcefire.com
Snort - Open Source Network IPS/IDS -- http://www.snort.org
GPG Key http://demo.sourcefire.com/jesler.pgp.key
AIM: eslerjoel		Gtalk: eslerj		Yahoo: eslerjoel
+---------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFFEoPAKbCSyXHckt4RAp7YAKCGjM7jXKfrglDFH6/pdF10MqTibgCcCnwP
gRGLb24+6e9tAVadLAubwas=
=JX4p
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list