Re: router installation?

["Alex Butcher, ISC/ISYS" <Alex.Butcher () bristol ac uk>]

--On 05 October 2004 04:18 +1300 Jason Haar <Jason.Haar () trimble co nz> 
wrote:

> Jason wrote:
>
> > Once you have logging figured out you have many options on how to
> > actually configure Snort. You can run multiple instances or have Snort
> > monitor the virtual interface "any". If this were not a firewall then
> > interface bonding might be appropriate to enable selective interface
> > monitoring with a single instance of Snort.
>
>
> I don't think bonding "disables" using the "raw" Ethernet cards at the
> same time(?).

Interfaces that are slaves to a bondx device certainly cannot be sniffed (I 
just checked). I'm not sure whether the same applies to normal IP usage, 
but I guess so.

> Jason

Best Regards,
Alex.
--
Alex Butcher: Security & Integrity, Personal Computer Systems Group
Information Systems and Computing             GPG Key ID: F9B27DC9
GPG Fingerprint: D62A DD83 A0B8 D174 49C4 2849 832D 6C72 F9B2 7DC9




-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users