[Snort-users] Snort & multi-port ethernet cards

larosa, vjay larosa_vjay at ...3331...
Thu Jun 20 13:20:05 EDT 2002

On the sun qfe cards just set the local-mac-address=true at the obp prompt.
All four
ethernet ports on a qfe card have MAC's assigned to them. By default sun
uses the onboardoard 
MAC for all NICS. The local-mac-address property will change this behaviour.


-----Original Message-----
From: Erek Adams [mailto:erek at ...577...]
Sent: Thursday, June 20, 2002 2:19 PM
To: Tom Sevy
Cc: Snort-Users eMail List (E-mail)
Subject: Re: [Snort-users] Snort & multi-port ethernet cards

On Thu, 20 Jun 2002, Tom Sevy wrote:

> Running various versions of snort, in the 1.8 range, I've tried to use two
> different multi-port ethernet adapters.



	One problem I ran into with a Sun qe4 card was that it had the same
MAC for each port on the card.  Now, that was with the old qe4 version--The
newer qfe4 has different MAC's for each port.  You might want to make sure
that the cards are on different physical segments and/or that the MACs are
different for each port.

	Good luck!

Erek Adams

Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list