snort on ubuntu 8.04

[penlin75]

ok now i am on this command:

Using any editor, open /etc/snort/snort.conf and make the following changes :

* In nano you can search using ctrl-W
* In vim you can search using /
* Search for "HOME_NET" , "EXTERNAL_NET", then mysql (without quotes).


1. Change "var HOME_NET any" to "var HOME_NET 192.168.0.0/16" (use your netmask here).

how do i know what my netmask is: i am on a private network of 192.168.75.xxx ?

[jimf]

Hmm, not familiar with what you are running, but if you open a terminal and key in "ifconfig", the display may shed some light on what you need.

[slimx3m]

ok now i am on this command:

Using any editor, open /etc/snort/snort.conf and make the following changes :

* In nano you can search using ctrl-W
* In vim you can search using /
* Search for "HOME_NET" , "EXTERNAL_NET", then mysql (without quotes).


1. Change "var HOME_NET any" to "var HOME_NET 192.168.0.0/16" (use your netmask here).

how do i know what my netmask is: i am on a private network of 192.168.75.xxx ?

were you following a tutorial?
the command that you will need to know your ip address and netmask is what jimf specified.