RE: IP needed

[Steve Halligan <agent33 () geeksquad com>]

It is my understanding that you can only run a multiple interface snort on
linux.  Try running two instances, one on each interface.  FBSD is not
understanding the interface "fxp1,fxp2".  

-Steve

> Trying to get snort to log on 2 NIC that have no IP set, 
> they are passive monitoring on a switch. The host runs
> FreeBSD 4.3 and Snort v1.7.
>
> I get the error below when I fire up snort, why? 
> Used ifconfig to set MTU manually to 1500, no change.
> Promiscuous mode doesnt need IP on a NIC, does snort require it?
>
> host# ./bin/snort -A fast -c conf/snort.conf -i fxp1,fxp2 -l logs/ -I
>
>         --== Initializing Snort ==--
>
> Initializing Network Interface fxp1,fxp2
> ioctl(SIOCGIFMTU): Device not configured
> ERROR: Can not get MTU of an interface fxp1,fxp2!

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users