RE: Multiple NICs in a Linux box and Snort

["Glenn Bailey" <Glenn.Bailey () datareturn com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I just did this yesterday .. Easy on a Fedora Coree box:

# modprobe bonding
# ifconfig bond0 up
# ifenslave bond0 eth1
# ifenslave bond0 eth2
# snort -i bond0

That just bonds the 2 eth interfaces to one .. Then run Snort
against it ..

This is of course you want the interfaces to report as 1 sensor.

Glenn E. Bailey III  |  Network Security Engineer
                            

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBQZ5HDvdeeSOtwK+JEQLxZgCglRlpgxxC6OFI5L9/NoKA+E9HKCsAn3ly
rxawCCVJHpSsyCYDaTunTvrF
=YS95
-----END PGP SIGNATURE-----


-------------------------------------------------------
This SF.Net email is sponsored by: InterSystems CACHE
FREE OODBMS DOWNLOAD - A multidimensional database that combines
robust object and relational technologies, making it a perfect match
for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users