Displaying 2 results from an estimated 2 matches for "bridge_ipfw_drop".
2003 Aug 28
1
snort, postgres, bridge
...following command:
/usr/local/bin/snort -A full -D -e -d -s -i fxp0 -c /usr
/local/etc/snort.conf
Where fxp0 and fxp1 are in the bridge
output from sysctl:
net.link.ether.bridge_cfg: fxp0:0,fxp1:0
net.link.ether.bridge: 1
net.link.ether.bridge_ipfw: 0
net.link.ether.bridge_ipf: 1
net.link.ether.bridge_ipfw_drop: 0
net.link.ether.bridge_ipfw_collisions: 0
The snort.conf is attached. I've attempted to start with a pretty
generic config, just to ensure things work.
The problem appears to be that snort simply doesn't log to the remote
postgres box (yes, there are host entries in pg_hba.conf, and ot...
2003 Aug 28
0
[louisk@bend.com: snort, postgres, bridge]
...following command:
/usr/local/bin/snort -A full -D -e -d -s -i fxp0 -c /usr
/local/etc/snort.conf
Where fxp0 and fxp1 are in the bridge
output from sysctl:
net.link.ether.bridge_cfg: fxp0:0,fxp1:0
net.link.ether.bridge: 1
net.link.ether.bridge_ipfw: 0
net.link.ether.bridge_ipf: 1
net.link.ether.bridge_ipfw_drop: 0
net.link.ether.bridge_ipfw_collisions: 0
The snort.conf is attached. I've attempted to start with a pretty
generic config, just to ensure things work.
The problem appears to be that snort simply doesn't log to the remote
postgres box (yes, there are host entries in pg_hba.conf, and ot...