Re: Multi interface problem

["Senthil Prabu.S" <prabu333 () hotpop com>]

> snort  -i eth0 eth1 eth2 -c /etc/snort/snort.conf
> Running in IDS mode
>
> Initializing Network Interface eth0
> ERROR: OpenPcap() FSM compilation failed: 
>        syntax error
> PCAP command: eth1 eth2
> Fatal Error, Quitting..
You have to start individual instances of snort
to sniff each of your interfaces, ie separate
snort process should be run for each NICs like
eth0, eth1 etc..

Example;
snort  -i eth0 -c /etc/snort/snort.conf
snort  -i eth1 -c /etc/snort/snort.conf 
...it goes on

N.S: When running in more than one interface, it's
better to start snort in background (-D option).


--
Senthil Prabu.S



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users