re: snortcenter/using a sensor with no ip address

[lindsay.hunt () ustug net]

Hello All,

I am running Snort 2.0 with Acid on Redhat 8. The Snort box has 2
interfaces; eth0 has an ip address and is used to administer the box; eth1
doesn't have an ip address and is plugged into a mirror port.  I am running
snort with the '-i eth1' option.   I have installed Snortcenter and would
like to use it to simplify rule management.  When I attempt to add the
sensor eth1 (no ip address) in Snortcenter, it appears that Snortcenter
wants an ip address for the sensor. When I attempt to push the rule set to
the sensor and then reload, Snortcenter complains that it cannot connect to
eth1 due to the fact that it doesn't have an ip address. Is there a way
around this?

regards,


Lindsay Hunt
Network Engineer
Alstom Power
phone 804-763-7239
mobile 804-334-1682
fax 804-763-7107

CONFIDENTIALITY : This e-mail and any attachments are confidential and may
be privileged. If you are not a named recipient, please notify the sender
immediately and do not disclose the contents to another person, use it for
any purpose or store or copy the information in any medium.



-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users