TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
majordomoiss.net Contact issforum-owneriss.net for help with any problems!
----------------------------------------------------------------------------

>Can't be done. The ISS daemon is bound to only one promiscuous mode card.

The engine is bound to the network card.

>To my knowledge you can't have multiple daemons running at the same time.

All pathes, files, pipes and sockets are hard coded in the daemon/engine
binaries :-(

But for Solaris it should be work by setting up seperate chroot environments
for every needed daemon/engine.
  I
>tried it as well to try to sniff my multiple fast-ether channels and after

For which operating system and network hardware you have tried this ?

For Solaris, the Sun Quad FastEthernet card with the Sun Trunking Software
supports the sniffing from EtherChannel trunks, eg. the snoop command can
access the trunk (via DLPI) by attaching the "trunk head".
The RealSecure engine use the DLPI mechanism also.

Birk

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]