Snort mailing list archives

RE: Multihomed Sensor


From: "Kreimendahl, Chad J" <Chad.Kreimendahl () umb com>
Date: Wed, 28 Jan 2004 09:33:53 -0600

 
You'll have to run a unique instance of snort for each interface... 

        -----Original Message-----
        From: mailing-list
[mailto:IMCEAEX-_O=HCC+20INSURANCE+20HOLDINGS+2C+20INC+2E_OU=HCC-HOUSTON
_CN=RECIPIENTS_CN=MAILING-LIST () USSIC com] 
        Sent: Saturday, January 24, 2004 1:13 AM
        To: 'snort-users () lists sourceforge net'
        Subject: [Snort-users] Multihomed Sensor
        
        

        I currently have a Linux box with 4 NICs.  How do I configure it
so that I can monitor each NIC separately with its own conf file?  I
have different subnets that I want to monitor. 

        Thanks in Advance!


Current thread: