This is a discussion on Re: [Snort-users] Multi interface problem within the Snort forums, part of the System Security and Security Related category; El s=C3=A1b, 26-02-2005 a las 14:49 +0800, abanger wu escribi=C3=B3: > snort -i ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
El s=C3=A1b, 26-02-2005 a las 14:49 +0800, abanger wu escribi=C3=B3:
> snort -i eth0 eth1 eth2 -c /etc/snort/snort.conf You can't use this syntax, you can't use more than one interface for the switch -i. If you are running Linux you can use the interface "any" to ask snort to listen on all interfaces. > Running in IDS mode >=20 > Initializing Network Interface eth0 > ERROR: OpenPcap() FSM compilation failed:=20 > syntax error > PCAP command: eth1 eth2 > Fatal Error, Quitting.. >=20 > thx. Regards. --=20 Jose Maria Lopez Hernandez Director Tecnico de bgSEC jkerouac@bgsec.com bgSEC Seguridad y Consultoria de Sistemas Informaticos http://www.bgsec.com ESPA=C3=91A The only people for me are the mad ones -- the ones who are mad to live, mad to talk, mad to be saved, desirous of everything at the same time, the ones who never yawn or say a commonplace thing, but burn, burn, burn like fabulous yellow Roman candles. -- Jack Kerouac, "On the Road" ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click _______________________________________________ Snort-users mailing list Snort-users@lists.sourceforge.net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/...fo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.p...st=snort-users |