Re: Configuration issue, Part II

[Chris Keladis <Chris.Keladis () cmc cwo net au>]

Chris Keladis wrote:

> DJDave Sobel wrote:
>
> > And of more importance to me, how do you specify binding to multiple
> > interfaces?  I'd like it to be watching traffic to all the internal
> > networks, not just one... (that way, I can see what ipchains missed..)
>
> This is in the Snort FAQ, but if you run a Linux 2.4 kernel and a
> special patch to Snort, and specify '-i any' Snort will monitor all
> interfaces (not certain if this patch has found it's way into mainstream
> Snort?)

Eeep.. Sorry, the patch is for libpcap, i wrongly assumed it was for
Snort.

*Drinks more beer.. Things will look clearly soon i'm sure* :)




Cheers,

Chris.

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users