Snort mailing list archives

Bonding - has anyone gotten it to work with an ether tap


From: quentyn () fotango com
Date: Tue, 28 May 2002 17:13:58 +0100

Sort of linked to snort.

I have an ether tap and am trying to recombine the 2 streams.

Has anyone had any luck with channel bonding (and snorting on that IF) ?

I am using the patch from source forge
http://sourceforge.net/projects/bonding/ ( and I know I should be asking
there, but bear with me) . I have eth0 ( the normal interface) and eth
1+2 ( the interfaces connected to the tap)

with out the bonding module loaded up I can see traffic on eth 1+2 as I
would expect. as I bring up bond0 I can no longer see traffic on eth1+2
or on bond0.

rmmod bonding and I can now tcpdump the real interfaces.....

Has anyone gotten bonding working under linux with an ether tap ?

BTW this is RH7.1 kernel 2.4.18

Q

-- 
#####################
Quentyn Taylor
Sysadmin - Fotango
#####################
Lamport's Law: A distributed system is one in which the failure of a
computer you didn't even know existed can render your own computer
unusable.

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: