RE: 1st Instance of Snort Fails When Starting 2nd

["Gary Borgeson" <gborgeson () aecc com>]

This worked! Great job, Thanks, G

-----Original Message-----
From: Demetri Mouratis [mailto:dmourati () cm math uiuc edu] 
Sent: Friday, August 29, 2003 1:12 PM
To: Gary Borgeson
Cc: snort-users () lists sourceforge net
Subject: Re: [Snort-users] 1st Instance of Snort Fails When Starting 2nd


This shounds like a limitation of one promiscuous process per interface
under Linux:

Try this:

1.      Manually put interface1 into promiscouos mode:
        # ifconfig eth0 promisc
2.      Manually put interface2 into promisciouus mode:
        # ifconfig eth1 promisc
3.      Add -p option to snort instance one init script.
4.      Add -p option to snort instance two init script.
5.      Restart all snort instances

On Fri, 29 Aug 2003, Gary Borgeson wrote:

> I now observe this after upgrading from 1.9.1 to 2.0.1:
>
> This Redhat 7.3 box has 2 sniffering interfaces with 2 different 
> snort.conf's. A "-T" start shows no sign of errors for both configs. 
> The first instance of Snort starts fine, but after trying to start the

> 2nd, the 1st disappears. Any clues?
>
> Thanks, G

---------------------------------------------------------------------
Demetri Mouratis
dmourati () linfactory com



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users