OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Snort-users] Snort start up on Multiple interface

From: Brian Webster (bwebsterACDSystems.com)
Date: Tue Apr 27 2004 - 12:02:20 CDT

Hi. I'm looking for a little "how-to" info to get Snort running on on a 4 port NIC.
It seems as though any attempt to add reference to additional interfaces in the etc/init.d/argus file are unsuccessful. (I am using the argus installation on Redhat9.0)
I have tried comma separted values eth0,eth1,eth2,eth3. no luck.
I don't really want to get multiple intances of snort running unless that is the only way. I'm just trying to get data logged from behind several switches to one machine. Has anyone got any advise ?

Brian

-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg297
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users