Snort mailing list archives
Re: Multiple NICs in a Linux box and Snort
From: Lyndon Tiu <ltiu () alumni sfu ca>
Date: Fri, 19 Nov 2004 10:51:20 -0800
It can monitor multiple NICs.
From snort.conf:
# Step #1: Set the network variables: # # You must change the following variables to reflect your local network. The # variable is currently setup for an RFC 1918 address space. # # You can specify it explicitly as: # # var HOME_NET 10.1.1.0/24 # # or use global variable $<interfacename>_ADDRESS which will be always # initialized to IP address and netmask of the network interface which you run # snort at. Under Windows, this must be specified as # $(<interfacename>_ADDRESS), such as: # $(\Device\Packet_{12345678-90AB-CDEF-1234567890AB}_ADDRESS) # # var HOME_NET $eth1_ADDRESS # # You can specify lists of IP addresses for HOME_NET # by separating the IPs with commas like this: # # var HOME_NET [10.1.1.0/24,192.168.1.0/24] # # MAKE SURE YOU DON'T PLACE ANY SPACES IN YOUR LIST! # # or you can specify the variable to be any IP address # like this: var HOME_NET any # Set up the external network addresses as well. A good start may be "any" var EXTERNAL_NET any -- Lyndon Tiu ------------------------------------------------------- This SF.Net email is sponsored by: InterSystems CACHE FREE OODBMS DOWNLOAD - A multidimensional database that combines robust object and relational technologies, making it a perfect match for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Multiple NICs in a Linux box and Snort Lyndon Tiu (Nov 19)
- Re: Multiple NICs in a Linux box and Snort Bennett Todd (Nov 19)
- <Possible follow-ups>
- Multiple NICs in a Linux box and Snort Bob Magnotta (Nov 19)
- Re: Multiple NICs in a Linux box and Snort Michael Boman (Nov 19)
- RE: Multiple NICs in a Linux box and Snort Glenn Bailey (Nov 19)
- Re: Multiple NICs in a Linux box and Snort Bennett Todd (Nov 19)