snort in slackware
 

i know next to nothing about slackware. i'm trying to get my box set up with snort. i installed slackware with 1 nic, and i just put another in. it seems to work--when i type ifconfig eth1 up i get:

root@CCSTAFF3:/etc# ifconfig
eth0 Link encap:Ethernet HWaddr 00:10:5A:0E:FA:2A
inet addr:63.172.182.230 Bcast:63.172.182.255 Mask:255.255.255.0
UP BROADCAST NOTRAILERS RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3559 errors:0 dropped:0 overruns:0 frame:0
TX packets:1579 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:915343 (893.8 Kb) TX bytes:289519 (282.7 Kb)
Interrupt:10 Base address:0x1000

eth1 Link encap:Ethernet HWaddr 00:10:4B:2C:EF:74
UP BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:11 Base address:0x1040

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2 errors:0 dropped:0 overruns:0 frame:0
TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:100 (100.0 b) TX bytes:100 (100.0 b)

so how do i get it to come up at startup? i don't need to use the computer for anything but IDS, so what else do i need to configure? i guess i just need to get the 2 nic cards up and then configure the computer to forward all of the packets from one nic to the other.

not 100% sure because i only have one network card on my slack box, but i believe you need to add entries for the second NIC to start up in /etc/rc.d/rc.inet1. in gentoo i had two nics, and there was a slightly different file (/etc/conf.d/net, iirc), but the layout of the two files looks basically the same to me. make sure the drivers for the second nic are loaded in rc.modules, of course.

yeah, i know the drivers are working fine because the second nic uses the same drivers (3com 3c59x). where do you configure the network in slackware? i am used to redhat/mandrake, which has an etc/sysconfig/ directory with all the network configuration stuff in it.

you do it manually (ifconfig eth1 up, etc.) and in startup files, or i think you can use the netconfig tool (as root).