A Tool for Running Snort in Dynamic IP Address Assignment Environment

Author: Shin Ishikawa Published Feb. 24, 2011 from SANS

The purpose of this paper is to detail the creation of a small tool program which aids the operation of the Snort IDS in dynamically assigned IP address environment. The configuration file of Snort (snort.conf) specifies IP numbers for the monitored network and servers. For the non-permanent IP address subscriber sites, which are the case for the most of ADSL users, these parameters need be updated every time the data link connection reset and new address is assigned.

Tags:

Read the complete paper at SANS