[Snort-users] Newbie Questions

Andreas Maus andreas_maus at ...375...
Tue Mar 6 13:15:32 EST 2001


Bob Staaf wrote:
> 
> Hello all,
> 
>      I am trying to get Snort running on a Red Hat 6.2 server.  I have
> installed Snort 1.7 via rpm, installed libpcap .4 so I think I have
> everything I need.  The problem is I have a server with 2 identical nics and
> even though I have changed snortd and snort.conf to reflect the nic I want
> to monitor (eth1) when I try and start snort using
> "/usr/sbin/snort -Afull -c /etc/conf/snort.conf" it still initializes eth0.
> 
I think you forgot the -i option. So append the -i option 
(in this case "-i eth1") to the command line.
It tells snort to listen on this interface.


Andreas.

-- 
@---------------------------------------------@
|       email: andreas_maus at ...375...       |
|    http://www.bigfoot.com/~andreas_maus/    |
@---------------------------------------------@




More information about the Snort-users mailing list