Snort mailing list archives

Re: Snort start up on Multiple interface


From: Daniel Wittenberg <daniel-wittenberg () starken com>
Date: Tue, 27 Apr 2004 16:46:38 -0500

The Linux RPM-installed version will actually only pick up ethernet
interfaces, and one small bug is that it only does ones with IP
addresses, which is something I'd like to get fixed in the next version
of the RPM's.

Dan

On Tue, 2004-04-27 at 15:15, Matt Kettler wrote:
At 01:02 PM 4/27/2004, Brian Webster wrote:
I have tried comma separted values eth0,eth1,eth2,eth3. no luck.
I don't really want to get multiple intances of snort running unless that 
is the only way.


AFAIK there's no support for specifying multiple interfaces to snort.

         3) if you're on linux, you have the option of using "any" as an 
interface, which will pick up all the interfaces (including lo, if I'm not 
mistaken).




-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: