Snort mailing list archives
Re: UDP is all I see..
From: Dr SuSE <drsuse () drsuse org>
Date: Wed, 16 May 2001 19:43:51 GMT
Bad nic. I replaced the nic with a new one and it's working fine now. Thanks.
Are you sure it's not a switch? It's possible you are getting broadcasts only. Is it a 10/100 hub/switch. I have found that on a 10/100 hub I can only sniff traffic running at the same speed as me or destined for me. I guess they are bridging the 2 backplanes internally on the hub. TR ----- Original Message ----- From: "Dr SuSE" <drsuse () drsuse org> To: "Snort Users" <snort-users () lists sourceforge net> Sent: Wednesday, May 16, 2001 10:23 AM Subject: [Snort-users] UDP is all I see..Maybe I'm missing something, I dont know. I setup a snort 1.7 box on SuSE 7.1 box kernel 2.2.18 I did not configure my network card with an IP address and it's connectedto ahub on my local lan. I run the command "ifconfig eth1 up" then do a"snort -dv -i eth1" All I'm able to see is UDP traffic. What am I missing here? Any ideas? Thanks, Doc --------------------------------------------- Microsoft ist nicht installiert. http://www.drsuse.org/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
--------------------------------------------- Microsoft ist nicht installiert. http://www.drsuse.org/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- UDP is all I see.. Dr SuSE (May 16)
- Re: UDP is all I see.. Joshua Stein (May 16)
- Re: UDP is all I see.. Todd Ransom (May 16)
- <Possible follow-ups>
- Re: UDP is all I see.. Dr SuSE (May 16)
