Snort mailing list archives
RE: Multihomed Sensor
From: "Kreimendahl, Chad J" <Chad.Kreimendahl () umb com>
Date: Wed, 28 Jan 2004 09:33:53 -0600
You'll have to run a unique instance of snort for each interface... -----Original Message----- From: mailing-list [mailto:IMCEAEX-_O=HCC+20INSURANCE+20HOLDINGS+2C+20INC+2E_OU=HCC-HOUSTON _CN=RECIPIENTS_CN=MAILING-LIST () USSIC com] Sent: Saturday, January 24, 2004 1:13 AM To: 'snort-users () lists sourceforge net' Subject: [Snort-users] Multihomed Sensor I currently have a Linux box with 4 NICs. How do I configure it so that I can monitor each NIC separately with its own conf file? I have different subnets that I want to monitor. Thanks in Advance!
Current thread:
- Multihomed Sensor mailing-list (Jan 27)
- <Possible follow-ups>
- RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)
- RE: Multihomed Sensor Dean Davis (Jan 28)
- RE: Multihomed Sensor Kreimendahl, Chad J (Jan 28)
- RE: Multihomed Sensor DeBerry, Casey (Jan 28)
- RE: Multihomed Sensor mailing-list (Jan 31)