Re: 2 sensors/1 interface?

[Michael Boman <michael.boman () securecirt com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 26 September 2002 06:17, netsec novice wrote:
> Can someone help me understand why ACID reports that I have 2 sensors when
> I only have one interface and one instance of SNORT running that I know of?
>
> Thanks

Check out the rest of the options, look at things like BPF filters, encoding, 
detail level...

Best regards
 Michael Boman

- -- 
Michael Boman
Security Architect, SecureCiRT (A SBU of Z-Vance Pte Ltd)
http://www.securecirt.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9kjlTds5fQJiraJwRAnqFAKDP+vK2mgKFu94G5rRbfYlKbl3n6ACgz5r0
DDHzYZjNDn13aSC+EvA52q0=
=C8ca
-----END PGP SIGNATURE-----



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users