Re: Getting One instance of snort to sniff 2 interfaces

[Josh Oshiro <josh () silicondefense com>]

izink () southwestern cc or us wrote:
> Hi Josh,
>
> I hope you don't mind me buggin you...
> I tried the -i any option and it returns to me.. unable to get MTU of device
> "Any". not sure what i am missing.. is it something obvious?
>
> sincerely
>
> Ingo
> Zink

Please reply all so that your message gets to the snort-users list.

Two thing to keep in mind when using mulitipule interfaces on snort is.
1. you need to have the latest libpcap installed.the older libpcap does
not support interface "any".
2. It does'nt work on win32 platforms. Libpcap still does not support
interface "any" on win32. 

-- 
|------------------------------------------|
| SnortSupport                             |
| Josh () silicondefense com                  |
| Silicon Defense - Tech Support for Snort |
| http://www.silicondefense.com/           |
|------------------------------------------|

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users