[Snort-users] Need to monitor 2GB Etherchannel trunk

eric eric-list-snort-users at ...11523...
Tue Oct 4 12:47:25 EDT 2005


On Tue, 2005-10-04 at 12:33:01 -0700, Joe S proclaimed...

> Any suggestions on how to do this?

OpenBSD 3.8 will support trunk interfaces. You can then just monitor the
trunk interface. We do that, but with a bridge interface. So basically, in
our config, we monitor bridge0.




More information about the Snort-users mailing list