Snort mailing list archives
RE: -i switch
From: "Michael Steele" <michaels () winsnort com>
Date: Mon, 21 Mar 2005 13:48:54 -0800
That is UNIX specific. Use the -W switch and use the number that corresponds to the interface you want to use. snort -v -i1 The above example will run Snort in verbose mode on interface 1 Kindest regards, Michael... WINSNORT.com Management Team Member -- Pick up your FREE Windows or UNIX Snort installation guides mailto:support () winsnort com Website: http://www.winsnort.com Snort: Open Source Network IDS - http://www.snort.org
-----Original Message----- From: snort-users-admin () lists sourceforge net [mailto:snort-users- admin () lists sourceforge net] On Behalf Of Lee Clemens Sent: Monday, March 21, 2005 1:26 PM To: snort-users () lists sourceforge net Subject: [Snort-users] -i switch I have seen documentation with using the -i switch followed by a number and with eth0, eth1, etc... However, it seems this is OS dependent. I am using windows and "Snort -W" does not supply the names of the connections (eth0,...). Is there any way I can cause these numbers to remain static or work around this issue some other way? I have tried installing Snort with "-i eth0" but OpenPcap fails to open the device. I am asking this because I disable/enable some network connections on this computer periodically and this disrupts the numbering scheme, causing Snort to be looking at the wrong NIC. Thanks! ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- -i switch Lee Clemens (Mar 21)
- RE: -i switch Michael Steele (Mar 21)
- <Possible follow-ups>
- FW: -i switch Lee Clemens (Mar 21)
- RE: -i switch Snort (Mar 21)
- RE: -i switch Chris Reid (Mar 21)
- RE: -i switch Michael Steele (Mar 21)
- RE: -i switch Chris Reid (Mar 21)
- -i switch Lee Clemens (Mar 23)
- SC Magazine Award Joe Matusiewicz (Mar 22)
- Re: SC Magazine Award Bjarte Malmedal (Mar 23)
- Re: SC Magazine Award Joe Matusiewicz (Mar 23)
- Re: SC Magazine Award Martin Roesch (Mar 24)
- Re: SC Magazine Award snort user (Mar 24)
- SC Magazine Award Joe Matusiewicz (Mar 22)