Snort running as virtual server

Discussion in 'HOWTO-Related Questions' started by wesr, Oct 11, 2006.

  1. wesr

    wesr New Member

    Followed the how-to on setting up VMWare and then Snort. Now that Snort is running I dont see the first packet unless I do a portscan via nmap aimed directly at the IP. Base works, all that jazz is perfect.

    I'm guessing that becasue the host machine eth0 is not actually running in promiscuous mode I wont see the packets on the wire.

    Anybody have any suggestions on how to make this work, w/o having to put the host eth0 in promiscuous mode?

Share This Page