var HOME_NET

["alexus" <ml () db nexgen com>]

in solaris i have

# ifconfig -a
lo0: flags=1000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4> mtu 8232 index 1
        inet 127.0.0.1 netmask ff000000 
le0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
        inet 64.32.229.174 netmask fffffff8 broadcast 64.32.229.175
        ether 8:0:20:7a:b0:58 
le0:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 3
        inet 64.32.229.173 netmask fffffff8 broadcast 64.32.229.175
# 

can i have in snort.conf

var HOME_NET $le0,$le0:1 ?

or i have to put just $le0 and it'll figure out the rest?




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users