Re: [sentinix-list] Pb activate snort sensor

On Thursday 11 December 2003 18:08, Thierry wrote:
> Hi all,
> I install Sentinix 1 beta ... All went find, but i do have a problem with
> snort sensor ... In my computer, i have two NIC ...
> One for network number 192.168.2.0 (DMZ) and the second one 10.0.0.0
> directly connecting on the mirror switch port (to sniff directly from my
> adsl modem) ... I want to run sensor snort on the second one, but it told
> me : Can't connect to 10.0.0.3:2525 .. What can i do to activate this
> sensor ?

The sensor is located at localhost, the SENTINIX box right?  In SnortCenter 
you should connect to localhost not to 10.0.0.3  (whatever that is?).

Enter SnortCenter and edit the localhost sensor, change "interface to sniff" 
to "eth1" and let "sensor ip" be "localhost".

	Michel

>
> Thx
>
> ps: sensor message: Error Access denied for 10.0.0.3 ....