| 1 |
On Monday 06 November 2006 21:59, Hans-Werner Hilse wrote: |
| 2 |
|
| 3 |
> > I would like to reverse those two names, so that snort can use the |
| 4 |
> > higher capacity card for its sniffer. I am not quite sure where to |
| 5 |
> > look even to begin this process. |
| 6 |
> |
| 7 |
> You can give arbitrary names to those interfaces by configuring udev |
| 8 |
> appropriately: |
| 9 |
> |
| 10 |
> e.g. /etc/udev/rules.d/10-my-own-rules: |
| 11 |
> ---snip |
| 12 |
> KERNEL=="eth*", SYSFS{address}=="00:12:34:fe:dc:ba", NAME="eth-lan" |
| 13 |
> KERNEL=="eth*", SYSFS{address}=="00:56:78:98:76:54", NAME="eth-sniff" |
| 14 |
> ---snip |
| 15 |
|
| 16 |
You could also just tell Snort to use eth1. But this is useful info. |
| 17 |
|
| 18 |
- Noven |
| 19 |
-- |
| 20 |
>-- Novensiles divi Flamen --< |
| 21 |
>---- Miles Militis Fons ----< |
Archives