Re: snort / promiscuous mode

2005-09-19 Thread Chris Kuethe
On 9/19/05, Sean Kiewiet <[EMAIL PROTECTED]> wrote: ... > # ifconfig -a > em0: flags=8943 mtu 1500 > em1: flags=8802 mtu 1500 > em2: flags=8802 mtu 1500 > em3: flags=8802 mtu 1500 > ... > How do I get the other 3 ip-less nics to run in promiscuous mode in > OBSD? You need to ifconfig your other in

snort / promiscuous mode

2005-09-19 Thread Sean Kiewiet
Hey all: OBSD3.7 SNORT2.3.3 I have a machine with 4 nics running 4 instances of snort: /usr/local/bin/snort -u sguil -g sguil -l /nsm/em0 -c /etc/snort/em0.snort.conf -U -A none -m 122 -i em0 -D /usr/local/bin/snort -u sguil -g sguil -l /nsm/em1 -c /etc/snort/em1.snort.conf -U -A non