Fwd: Troubles With Multiple Sensors

[Tim Rohrer <snort () metbymail com>]

Folks, right after I sent this message it dawned on my to try pinging 
the interface.  When I did, I got hits.  Seems to confirm snort is 
working.  Any other ideas?

Thanks.

Tim

> Date: Thu, 23 Oct 2003 06:03:39 -0700
> To: snort-users () lists sourceforge net
> From: Tim Rohrer <snort () metbymail com>
> Subject: Troubles With Multiple Sensors
> Cc:
> Bcc:
> X-Attachments:
>
> All,
>
> I am looking for more help as I continue to learn this thing : )
>
> I have added a second NIC to the computer I am using for snort and 
> have connected it to the shared uplink port on my switch (I am 
> trying to confirm with the manufacturer that this port gets 
> broadcasted traffic).  I gave the NIC an IP address not on my home 
> network.  To test, I issued the command:
>
> snort -v -i eth1 but I am not getting anything at all. 
>
> Do I need to be doing something different to test a second sensor? 
> Is the fact that I am not detecting any traffic a good sign that the 
> uplink port IS NOT doing what I hoped?
>
> I had tried placing an inexpensive 10M hub between my cable modem 
> and the router but the cable modem would not pass any traffic to the 
> hub.   : (
>
> Thanks in advance for any help.
>
> Tim
> --
>
> Tim Rohrer
> tgrohrer () metbymail com
> http://www.metbymail.com


--
Tim Rohrer
tgrohrer () metbymail com
http://www.metbymail.com