Disabling IPv6 in Snort
-
Hello. How can I disable IPv6 in Snort using the pfSense web interface? I have a large number of alerts with IPv6 addresses and I only want to be alerted on IPv4 alerts.
-
Errr doesn't that sort of negate using Snort.
Would you not be better off disabling IPv6 ?
-
@tsame said in Disabling IPv6 in Snort:
Hello. How can I disable IPv6 in Snort using the pfSense web interface? I have a large number of alerts with IPv6 addresses and I only want to be alerted on IPv4 alerts.
You can't disable IPv6 within Snort. Support for that is compiled into the binary. You can, as @NogBadTheBad suggested, and disable IPv6 on your network if you don't need it.
-
You can't disable IPv6 within Snort. Support for that is compiled into the binary. You can, as @NogBadTheBad suggested, and disable IPv6 on your network if you don't need it.
Would I need to disable IPv6 on every device on the network?
-
@tsame said in Disabling IPv6 in Snort:
You can't disable IPv6 within Snort. Support for that is compiled into the binary. You can, as @NogBadTheBad suggested, and disable IPv6 on your network if you don't need it.
Would I need to disable IPv6 on every device on the network?
Perhaps. Snort puts the interface it runs on in promiscuous mode, so any traffic hitting the interface is seen.