Re: Hi,

[Erek Adams <erek () snort org>]

On Wed, 14 May 2003, Derek Sherred wrote:

> I have snort running on a linux 8.0 machine with two interfaces.  I
> want snort to initialize on the interface with no ip address, but it
> seems to default to the ip assigned interface.  How can I specify what
> interface snort initializes on?

There's no such thing as "Linux 8.0".

> From 'man snort':

[...snip...]

       -i interface
              Sniff packets on interface.

[...snip...]

> From 'snort -\?':

[...snip...]

               -i <if>    Listen on interface <if>

[...snip...]

So....

        snort -i eth0     would snort in eth0
        snort -i fxp2     would snort on fxp2

Isn't it amazing what you can find in the manpages and the program help?
;-)  Almost as much info as in the Snort Users Manual....  ;-)

Cheers!

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users