Snort and interface parameter

[Alexander Hoogerhuis <alexh () ihatent com>]

I have snort running on my clunky laptop (running Linux 2.4), which
has various interface going up and down depending on what I am doing
(irda, two ethernet and sometimes VMware). If snort is started without
a specific interface in non-promiscous mode, will it then listen to
all available packets passing through the machine or do I have to
explicity specify what interfaces I want it to sniff on?

The idea is to have a statement in /etc/modules.conf that will do a
kill -SIG to snort every time an interface module is loaded to amke
sure it covers all interfaces...

ttfn,
A
-- 
Alexander Hoogerhuis                               | alexh () ihatent com
CCNP - CCDP - MCNE - CCSE                          | +47 905 76 198
"You have zero privacy anyway. Get over it."  --Scott McNealy

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users