Re: dual inteface?

[Phil Wood <cpw () lanl gov>]

If you have an os and pcap that supports the "any" interface, then you could:

  snort ... -i any ...

This may not be what you want since you get all the interfaces on your box.

I found that it did not appear to work with shared libraries (but
that might be due to some funny stuff on my end).  So, I built a
static snort.  (add -static to LDFLAGS and reload, might need -lz at
tail end of load line).

On Thu, Oct 24, 2002 at 08:28:04AM -0700, Daniel Curry wrote:
>  I had lost the email that gave information
> on how to configure snort to see two, eth2 and eth3,
> promicus interfaces on a redhat 7.2 system?
>  I did not see the information in http://sourceforge.net/mailarchive.
> Thank you.
>  
> -- 
> Daniel Curry
> DIRECT 650-232-4006
> FAX 650-232-3200
> PGP AD5A 96DC 7556 A020 B8E7  0E4D 5D5E 9BA5 C83E 8C92
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: Influence the future 
> of Java(TM) technology. Join the Java Community 
> Process(SM) (JCP(SM)) program now. 
> http://ad.doubleclick.net/clk;4729346;7592162;s?http://www.sun.com/javavote
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

-- 
Phil Wood, cpw () lanl gov



-------------------------------------------------------
This sf.net email is sponsored by: Influence the future 
of Java(TM) technology. Join the Java Community 
Process(SM) (JCP(SM)) program now. 
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0003en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users