[Snort-users] IP needed

Steve Halligan agent33 at ...187...
Wed May 16 10:12:14 EDT 2001

It is my understanding that you can only run a multiple interface snort on
linux.  Try running two instances, one on each interface.  FBSD is not
understanding the interface "fxp1,fxp2".  


> Trying to get snort to log on 2 NIC that have no IP set, 
> they are passive monitoring on a switch. The host runs
> FreeBSD 4.3 and Snort v1.7.
> I get the error below when I fire up snort, why? 
> Used ifconfig to set MTU manually to 1500, no change.
> Promiscuous mode doesnt need IP on a NIC, does snort require it?
> host# ./bin/snort -A fast -c conf/snort.conf -i fxp1,fxp2 -l logs/ -I
>         --== Initializing Snort ==--
> Initializing Network Interface fxp1,fxp2
> ioctl(SIOCGIFMTU): Device not configured
> ERROR: Can not get MTU of an interface fxp1,fxp2!

More information about the Snort-users mailing list