Can snort use an unconfigured interface?

["Shaun T. Erickson" <ste () smxy org>]

I thought that you can put an initerface into promiscuous mode and grab 
packets off the wire without it being configured up. I'd swear I've done 
this in the past, but perhaps my memory fails me.

I tried to have snort use a second, connected, but unconfigured, nic, to 
listen on, but I get:

> Initializing Network Interface sis0
> ERROR: OpenPcap() device sis0 open:
>         BIOCSETIF: sis0: Network is down
> Fatal Error, Quitting..

This is on FreeBSD 5.2.1.

        -ste


-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users