Snort mailing list archives
Re: two interfaces?
From: Paul Poh <paul () paulpoh com>
Date: Tue, 24 Sep 2002 11:41:26 -0400
I might be wrong but I think that if you want to run with different rules on each interface, you will need to run two separate instances. IMHO, two separate instances is probably a better way to go.
Daniel Curry wrote:
Which is better? Having one snort daemon run with two "-i" optionor have multiple snort daemon with one "-i" option? We would like to monitor two promiscuous interface.
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- two interfaces? Daniel Curry (Sep 23)
- Re: two interfaces? Erek Adams (Sep 23)
- Re: two interfaces? Bennett Todd (Sep 24)
- Re: two interfaces? Paul Poh (Sep 25)
- Re: two interfaces? Erek Adams (Sep 23)