Next: 3.7 My IP address
Up: 3 Configuring Snort
Previous: 3.5 How do I
LINUX: If you aren't running snort on linux 2.1.x/2.2.x kernel (with LPF
available) the only way is to run multiple instances of snort, one instance per
interface (with the -i option specifying the interface). However for linux
2.1.x/2.2.x and higher you can use libpcap library with S. Krahmer's patch
which allows you to specify 'any' as interface name. In this case snort will be
able to process traffic coming to all interfaces.
*BSD: Use the ``bridge'' interface to combine your nics into a logical
interface (bridge0).
|
