|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Re: [Snort-users] Binding snort to multiple interfaces
eric-dated-1083277626.193075aa63e273
catastrophe.net
Date: Wed Apr 07 2004 - 18:52:37 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
On Wed, 2004-04-07 at 16:48:17 -0500, eamonn doyle proclaimed...
> Patrick is right, run 2 snort processes, here is what I use it will get you
> the eth0 and eth1 you want to differentiate between the interfaces.
>
> /usr/local/bin/snort -d -i eth0 -I -D
> /usr/local/bin/snort -d -i eth1 -I -D
> /usr/local/bin/snort -d -i eth2 -I -D
>
> This works for me, I run it from the directory that contains the conf file and
Thanks.
So then my question is: is any work being done on making multiple
interfaces possible? I'd think folks monitoring seperate interfaces
would enjoy this, especially if each alert was tagged with an
interface ID.
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]