Re: Getting One instance of snort to sniff 2 interfaces

[Josh Oshiro <josh () silicondefense com>]

izink () southwestern cc or us wrote:
> Hi.
>
> I am rather new to Snort. I have heard and read on the snort website that i can
> monitor 2 interfaces with one instance of snort. I download the patched libpcap
> and now i am wondering how to do that.
> i have tried list multiple interfaces with more than one -i artgument when i
> start snort.. but it still rejects me. Think someone could give me a little
> insight in this topic ?
>
> Thnx in advance :)
>
> Ingo Zink
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> http://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

Set the network interface to "any". this only works with recent versions
of libpcap.

-- 
josh () silicondefense com
Snort Support
Silicon Defense

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users