[Snort-users] Multiple NICs in a Linux box and Snort

Glenn Bailey Glenn.Bailey at ...12688...
Fri Nov 19 11:19:07 EST 2004


 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I just did this yesterday .. Easy on a Fedora Coree box:

# modprobe bonding
# ifconfig bond0 up
# ifenslave bond0 eth1
# ifenslave bond0 eth2
# snort -i bond0

That just bonds the 2 eth interfaces to one .. Then run Snort
against it ..

This is of course you want the interfaces to report as 1 sensor.

Glenn E. Bailey III  |  Network Security Engineer
		            

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBQZ5HDvdeeSOtwK+JEQLxZgCglRlpgxxC6OFI5L9/NoKA+E9HKCsAn3ly
rxawCCVJHpSsyCYDaTunTvrF
=YS95
-----END PGP SIGNATURE-----




More information about the Snort-users mailing list