http://www.internetsecurityguru.com/
 
This is a good resourse for setting up Snort on a RHEL/Centos box.  There
maybe some good hints in the document on this link.
 
Gilbert

  _____  

From: plug-discuss-bounces@lists.plug.phoenix.az.us
[mailto:plug-discuss-bounces@lists.plug.phoenix.az.us] On Behalf Of Jim B
Sent: Tuesday, February 28, 2006 9:05 AM
To: Main PLUG discussion list
Subject: configure snort for eth1


I have changed the config in /etc/init.d/snortd to eth1 but when I run a "ps
aux grep snort" I still that eth0 is being used and if I grep eth in
/etc/snort/snort.conf there is no reference to use eth0
 
I want to configure snort to pull traffic from both eth0 and eth1 but mostly
eth1.
 
 
 
Jim