Snort mailing list archives

starting snort


From: Juan Fernandez <Juan.Fernandez () deltathree com>
Date: Tue, 17 Aug 2004 11:01:28 +0300

 

Hi

 

I have a question starting snort,

 

I have 2 nics they are eth1 and eth2 I want that etc1 will be in promisc
mode.

 

Now I read that to start snort I need to insert the following command:

 

Usr/local/snort/bin/snort -c /usr/local/snort/conf/snort.conf -l -I eth1 -u
snort_user -g snort_group 

 

Do I really need to insert the eth1 or eth2 ? I mean do I need to put the
promisc mode there or the other nic ?

 

Thanks 


Current thread: