Snort on FreeBSD

["Schmehl, Paul L" <pauls () utdallas edu>]

I just got done setting up a FreeBSD box with snort-mysql-acid, and I've
got a question about something strange.  Everything seems to be working
fine except that ACID is reporting *two* sensors.  One is the
promiscuous interface (which *should* be reporting) and the other is the
management interface.

I'm starting snort with a shell script that specifies -i xl0, which is
the promiscuous interface.

Why is it doing this?  Did I misconfigure something?  (I can provide
info if needed - ifconfig, snort.conf, etc.)

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
http://www.utdallas.edu/~pauls/
AVIEN Founding Member


-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users