Re: Snort running on two interfaces

[neil <neil () bellsimons com>]

I have seen a couple diff ways of doing this, from a whole separate
snort instance defined with -i for the separate interface, or conf based
changes.

> From the top of my head, I would say copy the snort.conf, alter it for a
separate interface, then run the new snort instance

snort -i eth2 -c /etc/snort/snort_eth2.conf  

etc etc

Its in the docs somewhere

Neil
Roxcor Technologies
www.pheusion.com


On Thu, 2004-03-18 at 08:58, Jason Humes wrote:
> What is the best way to get snort to run on two interfaces?  And what would
> be the best way to configure this to start automatically when the box boots?
> Right now, I just took the S20snort script and kinda just copied the portion
> of it that starts snort and copied and pasted it further down in the
> S20snort script...seems to work, but must not be the best way.  Also, does
> anyone know how to add my default gateway on boot, right now, I've got a
> line in the S20snort script which says, "route add default gw
> 192.0.0.201"...thanks
>
> Jason D. Humes
>  
>
>
> **********************************************************************
>
> Confidentiality Notice: 
>
> The information contained in this e-mail and any attachments may be legally
> privileged and confidential. If you are not an intended recipient, you are
> hereby notified that any dissemination, distribution or copying of this
> e-mail and any attachments is strictly prohibited. If you received this
> e-mail in error, please notify the sender and permanently delete the e-mail
> and any attachments immediately. You should not retain, copy or use this
> e-mail or any attachment for any purpose, nor disclose all or any part of
> the contents to any other person. 
>
> Thank you. 
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users