[Snort-users] Snort & multi-port ethernet cards

larosa, vjay larosa_vjay at ...3331...
Thu Jun 20 13:20:05 EDT 2002


On the sun qfe cards just set the local-mac-address=true at the obp prompt.
All four
ethernet ports on a qfe card have MAC's assigned to them. By default sun
uses the onboardoard 
MAC for all NICS. The local-mac-address property will change this behaviour.

vjl


-----Original Message-----
From: Erek Adams [mailto:erek at ...577...]
Sent: Thursday, June 20, 2002 2:19 PM
To: Tom Sevy
Cc: Snort-Users eMail List (E-mail)
Subject: Re: [Snort-users] Snort & multi-port ethernet cards


On Thu, 20 Jun 2002, Tom Sevy wrote:

> Running various versions of snort, in the 1.8 range, I've tried to use two
> different multi-port ethernet adapters.

[...snip...]

Tom,

	One problem I ran into with a Sun qe4 card was that it had the same
MAC for each port on the card.  Now, that was with the old qe4 version--The
newer qfe4 has different MAC's for each port.  You might want to make sure
that the cards are on different physical segments and/or that the MACs are
different for each port.

	Good luck!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net



-------------------------------------------------------
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list