Re: Snort on Linux with no IP

[James Riden <j.riden () massey ac nz>]

Brian McNeilly <bmcneilly () shaw ca> writes:

>    Hi,
>    I apologise in advance for the newbie question, which undoubtedly has
>    been discussed to death already. Before you send me to the FAQ, here
>    is the relevant snippit from there:
>    3.1 How do I setup snort on a 'stealth' interface?
>      *BSD and Linux:
>        ifconfig eth1 up
>    OK, so I do this and the response I get is: eth1: unknown interface:
>    No such device

Can you bring eth1 up in 'normal' mode? cat /proc/pci will give some detail such as:

..
 Bus  2, device   7, function  0:
    Ethernet controller: Realtek Semiconducto RTL-8139/8139C/8139C (rev 16).
      IRQ 11.
      Master Capable.  Latency=32.  Min Gnt=32.Max Lat=64.
      I/O at 0xc000 [0xc0ff].
      Non-prefetchable 32 bit memory at 0xe2000000 [0xe20000ff].

.. if you need to get/compile drivers for the card.

Can you bring up eth0 (the first NIC Linux discovers) in 'normal' or
stealth modes?

cheers,
 Jamie
-- 
James Riden / j.riden () massey ac nz / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users