Snort mailing list archives

RE: Snort & multi-port ethernet cards


From: "larosa, vjay" <larosa_vjay () emc com>
Date: Thu, 20 Jun 2002 16:19:40 -0400

On the sun qfe cards just set the local-mac-address=true at the obp prompt.
All four
ethernet ports on a qfe card have MAC's assigned to them. By default sun
uses the onboardoard 
MAC for all NICS. The local-mac-address property will change this behaviour.

vjl


-----Original Message-----
From: Erek Adams [mailto:erek () theadamsfamily net]
Sent: Thursday, June 20, 2002 2:19 PM
To: Tom Sevy
Cc: Snort-Users eMail List (E-mail)
Subject: Re: [Snort-users] Snort & multi-port ethernet cards


On Thu, 20 Jun 2002, Tom Sevy wrote:

Running various versions of snort, in the 1.8 range, I've tried to use two
different multi-port ethernet adapters.

[...snip...]

Tom,

        One problem I ran into with a Sun qe4 card was that it had the same
MAC for each port on the card.  Now, that was with the old qe4 version--The
newer qfe4 has different MAC's for each port.  You might want to make sure
that the cards are on different physical segments and/or that the MACs are
different for each port.

        Good luck!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: