RE: [Snort-users] 2 NIC card

From: Miller, Eoin <Miller(at)fhlb-of.com>
Date: Fri Feb 21 2003 - 12:10:35 EST

yes, you will have to run two snort processes, one for each interface you wish to monitor, when you start them up just use the -c option to point it at the snort config you want to use and then the -i for the interface, so something like this:\
C:>snort -c C:\snort\snort.conf -i eth0

I don't know what the interfaces on windows are going to show up as to snort, im guessing ether eth0 or something like Local Area Connection.

but both processes will be using the same rules file so you should be good to go.

> -----Original Message-----
> From: Chae Yew Chuen [mailto:windstorm_13@hotmail.com]
> Sent: Thursday, February 20, 2003 8:17 PM
> To: snort-users@lists.sourceforge.net
> Subject: [Snort-users] 2 NIC card
>
>
> i use 2 NIC card for my Snort box so, is there any way i

---

This SF.net email is sponsored by: SlickEdit Inc. Develop an edge. The most comprehensive and flexible code editor you can use. Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial. www.slickedit.com/sourceforge

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list Received on Fri Feb 21 12:17:14 2003