Snort mailing list archives

RE: Hi all :-)


From: "O'Flynn, Derek" <DOFlyn () lsuhsc edu>
Date: Wed, 13 Nov 2002 14:08:39 -0600

Find your IP_Address and do the following:
 
var HOME_NET 10.0.0.1/32
 
or if your IP changes and the interface you want to snort on is eth0:
 
var HOME_NET $eth0_ADDRESS
 
 
-----Original Message-----
From: Mike [mailto:lizard () lizard co il] 
Sent: Wednesday, November 13, 2002 1:46 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Hi all :-)
 
I'm a Snort newbie. hope that i will not ask stupid questions too much :-)
 
My first question is, how do i config snort to monitor ONLY the computer he
is installed on ?
Someone told me to read about home and external net, but i did not
understand how to do it.
 
Thanks,
 
Mike

Current thread: