RE: [SPAM] - Where's the libpcap library with the S. Krahmer patch? - Email found in subject

["Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>]

--On 29 March 2005 15:30 -0500 Marc Hering <mhering () reval com> wrote:

> You can do that...but wouldn't it be better to run a seperate instance of
> Snort for each interface?  This way each interface goes into a seprate
> log file (or even seperate databases) and can process the packets...

It depends on what you're trying to do. If you run separate instances, then 
they won't communicate with each other in order to track state of 
connections.

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users