[Snort-sigs] Snort logs

Robson Paniago Vasconcelos rpv1112 at ...1470...
Wed Apr 23 10:18:20 EDT 2003


Bryan,
you can run snort on other interfaces with the option
-i.
ex.: run on eth0 and eth1

# snort -i eth0 [other options]
# snort -i eth1 [other options]



> 
> It shows someone on one of our networks, downloading
> a potential virus from 
> our mail server.
> 
> But, since this firewall is running NAT, I don't
> know who.  
> Will snort run on more than one interface so I could
> track and see where it went 
> (for next time, I'm sure that info is lost this
> time)?
> 


_______________________________________________________________________
Yahoo! Mail
O melhor e-mail gratuito da internet: 6MB de espaço, antivírus, acesso POP3, filtro contra spam. 
http://br.mail.yahoo.com/




More information about the Snort-sigs mailing list