Re: Multiple Interfaces not supported?

[Brian <bmc () snort org>]

According to Jeff Newton:
> Is there something I need to do to enable multiple interface support in
> 1.8.3 on RedHat7.2?
>
> /usr/sbin/snort -i eth0 -i eth1 -c /etc/snort/snort.conf -b -o -A fast
> -z est
> Multiple interfaces are not supported. eth0 is used

1) install pcap from www.tcpdump.org.  Redhat's pcap sucks.
2) snort -i any

-- 
the best analogy between cracking and hacking seems to be a hacker can 
design a car, and a cracker knows how to crash it into a house.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users