Snort mailing list archives
Re: Multiple "sniffing" interfaces
From: Derya Sezen <funky () gsu linux org tr>
Date: Thu, 24 Jul 2003 11:03:48 +0300 (EEST)
There is a patch for libpcap that you can define "any" as interface, which means all of the interfaces. Maybe this speciality interests your client:) On Wed, 23 Jul 2003, Bryan Miller wrote:
I was curious as to the list member's experiences with using multiple interfaces in "sniffing" mode. We have a client who insists that we install multiple NIC's in our box instead of purchasing another appliance. I was wondering how this affects other add-ins such as ACID, SnortCenter and SnortSAM. If anyone has any experiences with running multiple NIC's in this fashion, I'd love to hear from you. I'm also guessing that you would have to run multiple instances of Snort? Bryan
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Multiple "sniffing" interfaces Bryan Miller (Jul 23)
- Re: Multiple "sniffing" interfaces Bryan Irvine (Jul 23)
- Re: Multiple "sniffing" interfaces Bennett Todd (Jul 23)
- Re: Multiple "sniffing" interfaces Derya Sezen (Jul 24)