Snort mailing list archives

Re: Multiple "sniffing" interfaces


From: Bryan Irvine <bryan.irvine () kingcountyjournal com>
Date: 23 Jul 2003 09:27:46 -0700

Yup, I run 8 instances of snort (1 instance per interface) on 2
different machines that both report to a postgresql db that acid
connects to.  ACID reports that there is 8 sensors. All is well. :-)

--Bryan 

On Wed, 2003-07-23 at 09:00, Bryan Miller wrote:
I was curious as to the list member's experiences with using multiple
interfaces in "sniffing" mode.  We have a client who insists that we
install multiple NIC's in our box instead of purchasing another
appliance.  I was wondering how this affects other add-ins such as
ACID, SnortCenter and SnortSAM.  If anyone has any experiences with
running multiple NIC's in this fashion, I'd love to hear from you. 
I'm also guessing that you would have to run multiple instances of
Snort?

Bryan



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: