[Snort-users] Multi interface problem

Jose Maria Lopez Hernandez jkerouac at ...12346...
Sat Feb 26 01:26:58 EST 2005


El sáb, 26-02-2005 a las 14:49 +0800, abanger wu escribió:
> snort  -i eth0 eth1 eth2 -c /etc/snort/snort.conf

You can't use this syntax, you can't use more than one
interface for the switch -i. If you are running Linux
you can use the interface "any" to ask snort to listen
on all interfaces.

> Running in IDS mode
> 
> Initializing Network Interface eth0
> ERROR: OpenPcap() FSM compilation failed: 
>         syntax error
> PCAP command: eth1 eth2
> Fatal Error, Quitting..
> 
> thx.

Regards.


-- 

Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac at ...12346...
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"






More information about the Snort-users mailing list