Re: [Snort-users] Snort on Linux with no IP

Brian McNeilly <bmcneilly@shaw.ca> writes:

> Hi,
> I apologise in advance for the newbie question, which undoubtedly has
> been discussed to death already. Before you send me to the FAQ, here
> is the relevant snippit from there:
> 3.1 How do I setup snort on a 'stealth' interface?
> *BSD and Linux:
> ifconfig eth1 up
> OK, so I do this and the response I get is: eth1: unknown interface:
> No such device

Can you bring eth1 up in 'normal' mode? cat /proc/pci will give some detail such as:

...
Bus 2, device 7, function 0:
Ethernet controller: Realtek Semiconducto RTL-8139/8139C/8139C (rev 16).
IRQ 11.
Master Capable. Latency=32. Min Gnt=32.Max Lat=64.
I/O at 0xc000 [0xc0ff].
Non-prefetchable 32 bit memory at 0xe2000000 [0xe20000ff].

... if you need to get/compile drivers for the card.

Can you bring up eth0 (the first NIC Linux discovers) in 'normal' or
stealth modes?

cheers,
Jamie
--
James Riden / j.riden@massey.ac.nz / Systems Security Engineer
Information Technology Services, Massey University, NZ.
GPG public key available at: http://www.massey.ac.nz/~jriden/



-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users