[Snort-users] snort.conf: HOME_NET value for AWS EC2 instance

Paul Li paul at ...17768...
Fri Feb 3 12:01:22 EST 2017


Thanks Al. My EC2 instance internal IP is inet addr:172.31.39.xxx. Should I
in the case use 172.31.0.1/12 as the HOME_NET?

Thanks,
Paul

On Fri, Feb 3, 2017 at 11:38 AM, Al Lewis (allewi) <allewi at ...589...> wrote:

> Probably needs to be a 172.16.0.0/12 address since I think that’s the
> default for private VPC’s.
>
> But that it all depends on your addressing scheme and the resources you
> are trying to protect.
>
>
> *Albert Lewis*
>
> ENGINEER.SOFTWARE ENGINEERING
>
> SOURCE*fire*, Inc. now part of *Cisco*
>
> Email: allewi at ...589...
>
> From: Paul Li <paul at ...17768...>
> Date: Friday, February 3, 2017 at 10:01 AM
> To: 'snort-users' <snort-users at lists.sourceforge.net>
> Subject: [Snort-users] snort.conf: HOME_NET value for AWS EC2 instance
>
> For Snort deployed on an AWS EC2, what value should be for HOME_NET  the
> snort.conf configuration?
>
> Thanks,
> Paul
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20170203/0559247e/attachment.html>


More information about the Snort-users mailing list