sounds like a hardware issue at first glance. you lose connectivity to the
whole box, or snort just not seeing anything?

if it's hardware, try the obvious - different nic, different slot, etc.

Also, with one of my (typically oddball) systems at home, one of my nics
just wouldn't do promiscious mode right at all (3com 3c595 w/ FreeBSD 4.5).
solved it by using my 2nd nic for the er, snorting, and the 595 for control
connection. Worked just fine that way. Thought I'd throw that in for good
measure.

T

-----Original Message-----
From: John Maestrale [mailto:jmaestraleNBME.org]
Sent: Thursday, May 23, 2002 10:10 AM
To: Snort-Users (E-mail)
Subject: [Snort-users] 2 NICS

Trying to run snort with 2 nics. Every time I put the second nick in I lose
connectivity completely. I am running redhat 7.3. Any suggestions?

Thanks,
John

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

*******************************************************************************************
Important: This electronic mail message and any attached files contain information intended
for the exclusive use of the individual or entity to whom it is addressed and may contain
information that is proprietary, privileged, confidential and/or exempt from disclosure
under applicable law. If you are not the intended recipient, you are hereby notified
that any viewing, copying, disclosure or distribution of this information may be subject
to legal restriction or sanction. Please notify the sender, by electronic mail or telephone,
of any unintended recipients and delete the original message without making any copies.
*******************************************************************************************

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]