[Snort-users] -i any ?

McCammon, Keith Keith.McCammon at ...3497...
Tue May 14 11:47:04 EDT 2002

Incidentally, I wrote up a fast and dirty how-to on running multiple instances of Snort on FreeBSD.  There are lots of ways to do it, but this one suited my needs for rule segregation, etc.  Maybe you'll find it of interest...




-----Original Message-----
From: Erek Adams [mailto:erek at ...577...]
Sent: Tuesday, May 14, 2002 2:30 PM
To: Jev
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] -i any ?

On Tue, 14 May 2002, Jev wrote:

> I have seen mention of using '-i any' arg with snort in order to get it
> to listen on all interfaces. I tried it on my multihomed freebsd
> 4.5-stable box (no less than 4 interfaces) and I get the following
> error.


> Snort works fine when I specify one particular interface. Is the any
> keyword related to the pcap lib?
> Clarification greatly appreciated :)


You'll need to run 4 instances.  :-/

Erek Adams


Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: bandwidth at ...382...
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list