[Snort-users] Getting One instance of snort to sniff 2 interfaces

Josh Oshiro josh at ...155...
Mon Apr 30 18:36:53 EDT 2001


izink at ...1942... wrote:
> 
> Hi.
> 
> I am rather new to Snort. I have heard and read on the snort website that i can
> monitor 2 interfaces with one instance of snort. I download the patched libpcap
> and now i am wondering how to do that.
> i have tried list multiple interfaces with more than one -i artgument when i
> start snort.. but it still rejects me. Think someone could give me a little
> insight in this topic ?
> 
> Thnx in advance :)
> 
> Ingo Zink
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

Set the network interface to "any". this only works with recent versions
of libpcap.

-- 
josh at ...155...
Snort Support
Silicon Defense




More information about the Snort-users mailing list