Re: IP needed

[Brian Caswell <bmc () mitre org>]

Olav Langeland wrote:
> Trying to get snort to log on 2 NIC that have no IP set,
> they are passive monitoring on a switch. The host runs
> FreeBSD 4.3 and Snort v1.7.
>
> I get the error below when I fire up snort, why?
> Used ifconfig to set MTU manually to 1500, no change.
> Promiscuous mode doesnt need IP on a NIC, does snort require it?
>
> host# ./bin/snort -A fast -c conf/snort.conf -i fxp1,fxp2 -l logs/ -I
>
>         --== Initializing Snort ==--
>
> Initializing Network Interface fxp1,fxp2
> ioctl(SIOCGIFMTU): Device not configured
> ERROR: Can not get MTU of an interface fxp1,fxp2!

Thats because the interface "fpx1,fpx2" does not exist.  Run two
instances of snort, one on each interface.

-brian

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users