Re: Snort with 2 eth

[Erek Adams <erek () snort org>]

On Mon, 10 Feb 2003, David Alonso De La Vega Tapage wrote:

> Hi for all again ..
>
> I'm not sure maybe do something wrong, but in my RH box when run snort
> -c /etc/snort/snort.conf  asume the eth1 as the right nic ..
>
> my eth1 is my internal nic ..  and eth0 is the sniffing nic and no have
> ip ..  stay up ..  but cant run snort with it ..
>
> What I need to configure, to snort use my eth0  to snort .. ?
>
> in snort.conf have ethaddress parameter ...  but as my eth0 not have IP
> don't need to configure ntohing here right?
>
> well thanx for all suggestions .. and links .. !

snort -i <interface_name> <other_options>

Or

snort -i eth0 <other_options> should work.

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users