This is a good resourse for setting up Snort on a
RHEL/Centos box. There maybe some good hints in the document on this
link.
Gilbert
I have changed the config in /etc/init.d/snortd to eth1 but when I run a
"ps aux grep snort" I still that eth0 is being used and if I grep eth in
/etc/snort/snort.conf there is no reference to use eth0
I want to configure snort to pull traffic from both eth0 and eth1 but
mostly eth1.
Jim