Re: 1st Instance of Snort Fails When Starting 2nd

[Demetri Mouratis <dmourati () cm math uiuc edu>]

This shounds like a limitation of one promiscuous process per
interface under Linux:

Try this:

1.      Manually put interface1 into promiscouos mode:
        # ifconfig eth0 promisc
2.      Manually put interface2 into promisciouus mode:
        # ifconfig eth1 promisc
3.      Add -p option to snort instance one init script.
4.      Add -p option to snort instance two init script.
5.      Restart all snort instances

On Fri, 29 Aug 2003, Gary Borgeson wrote:

> I now observe this after upgrading from 1.9.1 to 2.0.1:
>
> This Redhat 7.3 box has 2 sniffering interfaces with 2 different
> snort.conf's. A "-T" start shows no sign of errors for both configs.
> The first instance of Snort starts fine, but after trying to start the
> 2nd, the 1st disappears. Any clues?
>
> Thanks, G

---------------------------------------------------------------------
Demetri Mouratis
dmourati () linfactory com



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users