[Snort-users] Snorting on 2 interfaces
Conan the Librarian
conan_the_librarian at ...4723...
Mon Apr 19 04:55:13 EDT 2004
Need a little help here configuring snort to sniff on two interfaces
simultaneously in a low traffic environment.
Tried editing /etc/init.d/snort config file with IFACE=eth0,eth1 then
IFACE=[eth0,eth1] then two separate lines of IFACE=eth0 and IFACE=eth1 all
with no joy. Read Beale, Foster and Posluns' book cover to cover. Checked
man pages. Searched archives. All have HINTS that it can be done but no one
specifies the syntax of the initiation or conf file.
Anyone done this before?
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 3648 bytes
Desc: not available
More information about the Snort-users