Eric, I did read that FAQ but I also read that latest versions of
libpcap should have that patch. Nevertheless, I'll look more into it
some more. Thanks. -cpu
__
Do you Yahoo!?
Yahoo! Small Business - Try our new Resources site
Hello CPU,
Ok, didn't know that, we're still using version 0.7 of libpcap. One day it will
be updated, but there are other packaged that use that library, like ppp-filter
where the source needs some patches to work with the latest pcap version. So
unfortuanatly it's not trivial to update.
Does snort/uclibc-bering not support multiple interfaces? It seems that
it will only listen on a single interface per instance. I have modified
the init script arguments to look like this:
before:
-m 027 -D -c /etc/snort/snort.conf -l /var/log/snort -d -i $INTERFACE
after:
-m 027 -D -c
Cpu,
Snort won't run on multiple interfaces out of the box, see the Snort faq:
http://www.snort.org/docs/faq.html#3.4
So you need to apply a patch to libpcap to make this possible.
Eric
Does snort/uclibc-bering not support multiple interfaces? It seems that
it will only listen on a single
