[Snort-devel] Re: [Snort-users] Snort on Two Ethernet cards machine

Dan Hollis goemon at ...183...
Thu Jan 4 18:25:06 EST 2001


On Thu, 4 Jan 2001, Imran Ismail Shaikh wrote:
> 1. Can you have a machine with two ethernet cards such that one is
> numbered and other is un numbered? How?

Yes. Simply don't assign an ip address to the other ethernet card,

> 2. How one can run a snort on a machine with two ethernet cards, such that
> one ethernet is numbered (with some IP address) and the other is un
> numbered (0.0.0.0)

A true un-numbered interface has no ip address at all, not even 0.0.0.0.

It's simple to bring up un-numbered interface on linux:

  ifconfig eth1 up

That's all.

-Dan





More information about the Snort-devel mailing list