Snort mailing list archives

AW: (Snort-users) question


From: <sandro.poppi () wacker com>
Date: Fri, 02 Nov 2001 08:58:00 +0100

    Is it possible to have snort ( 1.8.1-RELEASE ) running in
promiscuous mode in more than one interface ??? Ommiting the -i
interface seems to make snort getting the first available
interface and
using it in promiscuous mode.

I created a snort initscript where you can handle this behaviour resulting in
one snort process running for each given interface. Take a look on my Snort
Statistics HOWTO at http://www.lug-burghausen.org/projects/index.htm#snort-stat.
If you want to use snort with all interfaces of your snort box try using -i any,
this requires an actual version of libpcap.

HTH,
Sandro


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: