Snort mailing list archives

Re: no ip addr. on 2nd interface (more info)


From: Michael Boman <michael () ayeka dyndns org>
Date: Fri, 13 Sep 2002 02:56:09 +0800

On Thu, Sep 12, 2002 at 06:08:36PM +0000, T.Shaw wrote:
Hello all, Thanks for the responces.. 
Since i have this setup and working.. the hard part is done.. 
now im wondering ( its been up for more than two weeks) why i
dont see any thing in the database. In setting up the snort.conf
file.. what exactly would be my HOME_NET set to?  We have multiple vlans
internally.. could i just list them all out? or "super" net them with
like a /16 or something? ( we have internal 192.168.x.x nets)

One big is better then several small. You might need to run several
instances of snort.

Best regards
 Michael Boman

-- 
Michael Boman
Student, Husband, Geek. Not necessary in that order thought.



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: