logging with multiple nics

[Jamil Farshchi <jfarshch () hq nasa gov>]

Hello,

Will snort allow us to run multiple instances of the program with each 
using a separate nic, and log everything to the same directory?

One host, two nics, two separate snort processes, and have both processes 
log to the same directory at the same time. Does snort automatically modify 
the filenames to distinguish between the two interfaces, or would this 
configuration break something?

We would like to have everything logged to one directory and keep the 
current filename format, but add a simple distinguisher like 
snort2-xxxx () xxxx log for the second nic logs.

Any information on if this is possible with snort (without having to write 
an inhouse script) would be greatly appreciated.


Jamil D. Farshchi
Information Technology & Security
NASA Office of Inspector General
Washington, DC 20546
Phone: 202.358.1897
Fax: 202.358.2990