Snort mailing list archives

Using snort to listen on a nic without an IP


From: "Mark Reis" <mcr2z () cs virginia edu>
Date: Wed, 21 Jan 2004 16:50:40 -0500

Hello,

I have snort running on a FreeBSD 5.1 box and was using it to monitor the
uplink for ~1500 machines. Unfortunately, I found out that all of this
traffic would flood the network connection and I could hardly even ssh into
the machine. So I've placed a second nic into the machine and I would like
to configure it for snort to listen without giving it an IP. 

I'd appreciate help on what conf changes I'd need to do with both freebsd
and snort.

Thanks,
Mark



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: