[Snort-users] 2 sensors/1 interface?

Robby Desmond rdesmond at ...6547...
Thu Sep 26 15:00:04 EDT 2002

At 10:17 PM 9/25/02 +0000, netsec novice wrote:
>Can someone help me understand why ACID reports that I have 2 sensors when 
>I only have one interface and one instance of SNORT running that I know of?

If you've changed the command line BPFs, you are effectively using a "new" 
sensor and ACID will treat it as such.

Robert Desmond
Systems Administrator
UCSB Extended Learning Services

More information about the Snort-users mailing list