[Snort-users] snort on multiple interfaces

Martin Roesch roesch at ...421...
Fri Jan 12 12:17:45 EST 2001


Hi Rick,
     You can't add other network interfaces, but you can specify other
networks like this:

var HOME_NET [a.b.c.d/25,w.x.y.z/24]

Try that.

    -Marty

Rick Francis wrote:
> 
> preprocessor portscan: a.b.c.d/25 3 5 /var/log/snort.alert
> 
> var HOME_NET a.b.c.d./25
> 
> how can i add other networks/interfaces to these lines for snort to watch?
> 
> rf
> 
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users




More information about the Snort-users mailing list