[sentinix-list] Snort with an RO ethernet cable
steveb7-/[email protected] Sun, 21 Mar 2004 16:43:57 -0700
| Newsgroups | gmane.linux.sentinix |
|---|---|
| Message-ID | <[email protected]> |
I've been working to get Snort setup this weekend in conjunction with a "receive only" ethernet cable I constructed and an article from Linux Journal (http://www.linuxjournal.com/article.php?sid=6985&mode=thread&order=0) as a guide. However, I've hit a small roadblock. I'm not quite clear on how to translate the configuration from the article into the Sentinix GUI. I do not want an IP on the nic so I've left that blank; I entered eth1 as the interface to sniff, and I entered "-D -i eth1 -p" on the Snort command line; I'm not clear on what port to use so it's not working yet. Can anyone help me get this going? Steve