[Snort-users] Listening on two interfaces under Debian?

Michael Boman michael at ...1290...
Thu Mar 15 19:06:10 EST 2001


Fyodor wrote:
> 
> On Thu, Mar 15, 2001 at 10:15:05AM +0800, Michael Boman wrote:
> > Fyodor wrote:
> > >
> > > On Tue, Mar 13, 2001 at 01:19:23PM +0800, Michael Boman wrote:
> > > > Kevin.Brown at ...1022... wrote:
> > > >
> > >
> > > Need to update to http://snort.sourceforge.net/snort-daily.tar.gz, I fixed this bug
> > > after snort 1.7 was released. :) (or hold on until we release 1.7.1 very soon now (tm) :))
> > >
> > > cheers
> > > -F
> >
> > I grabbed the CVS archive yesterday and build my own .deb package (using
> > the .diff.gz from 1.7-4 with a few modifications). The package works
> > fine, but still I can't use "-i any" nor can I use "-i eth0 -i eth1".
> >
> 
> Uhh.. what happens when you try to use -i any here? I don't have any debian around right now, so kinda painful to test. which libpcap is there?

Same as last time:

Initializing Network Interface any
ioctl(SIOCGIFMTU): No such device
ERROR: Can not get MTU of an interface any!


I am currently running libpcap 0.4a6 and It's a pretty old version I
guess. Should I backport the libpcap 0.6.2 to my Debian 2.2 instead?
Would that solve my problem?

Best regards
 Michael Boman

-- 
"eLINUX  ---  Enabling the Net Economy on Linux"
----------------------------------------------------------
Michael Boman                   eLinux Pte Ltd
LPIC-1                          http://www.elinux.com.sg
Technical Consultant            Tel:    (65)  227 6180
michael at ...1290...           Fax:    (65)  227 5808
----------------------------------------------------------




More information about the Snort-users mailing list