Arch Linux

grail

Member

Registered: 2005-02-22

Posts: 70

setting up 'stealthed interface' for snort

I am doing some testing with snort and want to setup my wireless interface (eth1) on my laptop to come up but not get an IP address.

So currently eth1 comes up and is assigned an IP from the wireless AP.

so in rc.conf I made the following changes:

eth0="dhcp"
eth1="eth1 netmask 255.255.255.0 broadcast 192.168.1.255"
INTERFACES=(lo eth0 eth1)

but when I restart my network eth0 comes up as per normal but eth1 does not. If I use the command 'ifconfig eth1 up' it then comes up but has an IP address assigned.

Any suggestions?

FUBAR

Member

From: Belgium

Registered: 2004-12-08

Posts: 1,029

Website

Re: setting up 'stealthed interface' for snort

He doesn't want eth1 to get an IP tho.

If you remove it from the INTERFACES list, it won't get an IP, nor a netmask or broadcast. But those last two don't make any sense without an IP, do they?

---

A bus station is where a bus stops.
A train station is where a train stops.
On my desk I have a workstation.

cactus

Taco Eater

From: t͈̫̹ͨa͖͕͎̱͈ͨ͆ć̥̖̝o̫̫̼s͈̭̱̞͍̃!̰

Registered: 2004-05-25

Posts: 4,622

Website

Re: setting up 'stealthed interface' for snort

just statically assign it a loopback address with a full host mask or something.

eth1="eth1 127.200.200.200 netmask 255.255.255.255"

---

"Be conservative in what you send; be liberal in what you accept." -- Postel's Law
"tacos" -- Cactus' Law
"t̥͍͎̪̪͗a̴̻̩͈͚ͨc̠o̩̙͈ͫͅs͙͎̙͊ ͔͇̫̜t͎̳̀a̜̞̗ͩc̗͍͚o̲̯̿s̖̣̤̙͌ ̖̜̈ț̰̫͓ạ̪͖̳c̲͎͕̰̯̃̈o͉ͅs̪ͪ ̜̻̖̜͕" -- -̖͚̫̙̓-̺̠͇ͤ̃ ̜̪̜ͯZ͔̗̭̞ͪA̝͈̙͖̩L͉̠̺͓G̙̞̦͖O̳̗͍

enderst

Member

Registered: 2004-06-28

Posts: 69

Re: setting up 'stealthed interface' for snort

take eth1 out of your interfaces array. when you're ready to start testing just use 'ifconfig eth1 up'