RE: 2 NIC card

["Miller, Eoin" <Miller () fhlb-of com>]

yes, you will have to run two snort processes, one for each interface
you wish to monitor, when you start them up just use the -c option to
point it at the snort config you want to use and then the -i for the
interface, so something like this:\
C:>snort -c C:\snort\snort.conf -i eth0

I don't know what the interfaces on windows are going to show up as to
snort, im guessing ether eth0 or something like Local Area Connection.

but both processes will be using the same rules file so you should be
good to go.

> -----Original Message-----
> From: Chae Yew Chuen [mailto:windstorm_13 () hotmail com] 
> Sent: Thursday, February 20, 2003 8:17 PM
> To: snort-users () lists sourceforge net
> Subject: [Snort-users] 2 NIC card
>
>
> i use 2 NIC card for my Snort box so, is there any way i 
> don't use 2 config 
> files to run the box ??
>
> _________________________________________________________________
> Add photos to your e-mail with MSN 8. Get 2 months FREE*. 
> http://join.msn.com/?page=features/featuredemail
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: SlickEdit Inc. Develop an 
> edge. The most comprehensive and flexible code editor you can 
> use. Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 
> 30-Day Trial. www.slickedit.com/sourceforge 
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe: 
> https://lists.sourceforge.net/lists/listinfo/s> nort-users
>
> Snort-users list archive: 
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users