Snort mailing list archives
Two Ethernet Interfaces?
From: "Mike Koponick" <mike () redhawk info>
Date: Mon, 4 Nov 2002 14:19:35 -0800
I was wondering if it was absolutely necessary to have TWO ethernet interfaces for the Snort sensor? Is this done for security or performance issues? I would think that if you had one interface it would work fine if there wasn't a lot of traffic. However, I would like to run in promisc mode, as I could "catch" more traffic that way, so I would assume if you wanted to run in promisc mode you would have to have two ethernet interfaces, true? Thanks in advance for you help. Mike ------------------------------------------------------- This SF.net email is sponsored by: ApacheCon, November 18-21 in Las Vegas (supported by COMDEX), the only Apache event to be fully supported by the ASF. http://www.apachecon.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Win2k and Packet.dll Thomas T. Evans, III (Nov 04)
- RE: Win2k and Packet.dll Michael Steele (Nov 04)
- Two Ethernet Interfaces? Mike Koponick (Nov 04)
- <Possible follow-ups>
- RE: Win2k and Packet.dll Miller, Eoin (Nov 04)
- RE: Win2k and Packet.dll Thomas T. Evans, III (Nov 05)
- RE: Win2k and Packet.dll Michael Steele (Nov 05)
- RE: Win2k and Packet.dll Thomas T. Evans, III (Nov 05)