Re: Multiple NICs in a Linux box and Snort

[Michael Boman <michael.boman () gmail com>]

On Mon, 8 Nov 2004 09:17:23 -0800 (PST), Bob Magnotta
<bobmagnotta () yahoo com> wrote:
> Can snort running on a Linux box (Suse) monitor multiple NICs or is it
> limited to one NIC? 

You can use the channel bonding driver to merge several physical NIC
to a logical NIC (mostly used when you use a tap to collect data).

You can also use the 'any' interface to collect and analyse data from
all interfaces (including the loopback interface) or run several
instances of snort (one for each interface).

Best regards
 Michael Boman


-------------------------------------------------------
This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users