Snort mailing list archives

Mutil homed sensor


From: "John Cunningham" <JCUNNING () kumc edu>
Date: Thu, 13 Jan 2005 13:00:32 -0600

Hello, I am new to the group and apologize if I missed this in the docs,
but:
 
I am running latest Snort on Redhat FC3. I am configuring a remote
sensor box that has two interf's. One will go to a span port on Cisco
switch the other interface is set to log to a mysql \ acid box. How do I
configure snort to listen on eth1 but report out on eth0? Any help much
appreciated in advance. JC

Current thread: