Snort mailing list archives

Re: snort and network tap

From: Bennett Todd <bet () rahul net>
Date: Wed, 16 Oct 2002 16:32:09 -0400

2002-10-16-13:29:18 Michael Boman:

On Thursday 17 October 2002 01:06, Peter Erickson wrote:

[needs one snort to see the two interfacecs coming off his
 network tap]


If you are running Linux I recommend you to investigate the 'channel bonding' 
features in the kernel.


Yes indeedie. I posted a ``mini-howto'' note on this here recently.
Peter, I'll email you a copy under separate cover (and will also be
happy to copy anyone else who'se interested).

-Bennett

Attachment: _bin
Description:

Current thread:

snort and network tap Peter Erickson (Oct 16)
- Re: snort and network tap Michael Boman (Oct 16)
  - Re: snort and network tap Bennett Todd (Oct 16)
  - Re: snort and network tap Peter Erickson (Oct 16)
- Re: snort and network tap Scot Scot (Oct 16)
- Re: snort and network tap Jeff Nathan (Oct 17)