Snort mailing list archives
Re: Configure snort to use eth1
From: Eric Hines <eric.hines () appliedwatch com>
Date: Thu, 02 Mar 2006 10:07:52 -0600
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jim, Have you tried bonding the (2) nics? Also, try specifying it at the command line when starting snort ($ snort -i eth1...) Best Regards, Eric Hines, GCIA, CISSP CEO, President Applied Watch Technologies, LLC - --------------------------------------------- Eric Hines, GCIA, CISSP CEO, President Applied Watch Technologies, LLC 1095 Pingree Road Suite 213 Crystal Lake, IL 60014 Toll Free: (877) 262-7593 ext:327 Direct: (847) 854-2725 ext:327 Fax: (847) 854-5106 Web: http://www.appliedwatch.com Email: eric.hines () appliedwatch com - -------------------------------------------- "Enterprise Open Source Security Management" Jim B wrote:
I have changed the config in /etc/init.d/snortd to eth1 but when I run a "ps aux grep snort" I still that eth0 is being used and if I grep eth in /etc/snort/snort.conf there is no reference to use eth0 I want to configure snort to pull traffic from both eth0 and eth1 but mostly eth1. Jim
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFEBxhYbOqF2QHgUK0RAqoeAKDZgqtCuRl61yRdjcNLcxrL+H3VMACfbnyj f7bI0du8MmIY3bvuyUIESVk= =+WVh -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Configure snort to use eth1 Jim B (Feb 28)
- RE: Configure snort to use eth1 Patrick S. Harper (Feb 28)
- Re: Configure snort to use eth1 Jim B (Feb 28)
- RE: Configure snort to use eth1 James Lay (Feb 28)
- Re: Configure snort to use eth1 Jim B (Feb 28)
- Message not available
- Message not available
- Re: Configure snort to use eth1 Jim B (Feb 28)
- Re: Configure snort to use eth1 James Lay (Feb 28)
- Re: Configure snort to use eth1 Jim B (Feb 28)
- RE: Configure snort to use eth1 Patrick S. Harper (Feb 28)