[Snort-users] detect on specific MAC address

Jericho Lee jenchiehlee at ...125...
Thu Oct 21 06:36:20 EDT 2004

HI List, 


           We all know that snort can be in NIDS mode to detect all the
packets in the network, but can snort just detect some specific destination

           I have a computer with 2 NIC, and I want snort to detect some
packets send to the second NIC only, 

So other packets without the MAC address in the header the same with the 2nd
NIC MAC address will not be captured by snort, 

Can snort do this? 


Thanks for your Help in advance.


Jericho Lee

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041021/f841d08e/attachment.html>

More information about the Snort-users mailing list