Re: Configuring Snort
Thanks, I already checked, unfortunately I am a bit too newbie to understand
this
Q: IP address is assigned dynamically to my interface, can I use snort with
it?
A: Yes.With snort 1.7 and later, <interface>_ADDRESS variable is
available.
The value of this variable will be always set to IP address/Netmask of
the
interface which you run snort at. if interface goes down and up again
(and
an IP address is reassigned) you will have to restart snort. For earlier
versions of snort numerous scripts to achieve the same result are
available.
Where & what exactly do I need to do?
I have checked the files for possible eg,etc. to locate what I need to do,
as yet I cannot locate anything that will help.
TIA,
CraigW
----- Original Message -----
From: "Wouter van Gils" <wouter@the-construct.cx>
To: "cdpye" <cdpye@optusnet.com.au>
Cc: <debian-security@lists.debian.org>
Sent: Friday, August 31, 2001 11:50 PM
Subject: Re: Configuring Snort
> I suggest you check this out:
>
> http://snort.sourcefire.com/docs/faq.html
>
> the snort support pages are 'very' clear and helpfull on setting this up
> as a monitoring daemon.
>
>
>
>
>
> [On 31 Aug, 2001, cdpye wrote in " Configuring Snort "]
> > Hi,
> >
> > I was wondering if someone could point me to a good reference. I need to
set
> > snort up to monitor an ADSL connection with a dynamic IP. Does anyone
know
> > how I could/should go about this?
> >
> >
> > TIA,
> >
> > CraigW.
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Wouter van Gils -=- wouter@the-construct.cx
> http://the-construct.cx/
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
Reply to: