[
https://issues.apache.org/jira/browse/METRON-259?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15349672#comment-15349672
]
ASF GitHub Bot commented on METRON-259:
---------------------------------------
Github user nickwallen commented on the issue:
https://github.com/apache/incubator-metron/pull/176
AFAIK, the HOME_NETWORK is used primarily to designate which traffic should
be validated against the rule set. If Snort sees traffic where the source or
destination is NOT associated with the HOME_NETWORK then it will not alert.
For replaying raw pcap in our demo environment, I want all traffic to be
run against the rule set. Setting HOME_NETWORK to 'any' achieves this. What
do you think?
> ERROR! ERROR! 'dict object' has no attribute u'ansible_tap0'
> ------------------------------------------------------------
>
> Key: METRON-259
> URL: https://issues.apache.org/jira/browse/METRON-259
> Project: Metron
> Issue Type: Bug
> Reporter: Nick Allen
> Attachments: ansible (2).log
>
>
> 2016-06-24 11:10:53,994 p=66991 u=xxx | TASK [snort : Configure home
> network] ******************************************
> 2016-06-24 11:10:54,277 p=66991 u=xxx | ^[[0;31mfatal:
> [ec2-xxx-xxx-xxx-xxx.us-west-2.compute.amazonaws.com]: FAILED! => {"failed":
> true, "msg": "ERROR! ERROR! 'dict object' has no attribute
> u'ansible_tap0'"}^[[0m
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
