Interfaces on Snort
What is the use of interfaces in Snort execution? How does one select the required interface in Snort execution?

    Requires Free Membership to View

    By submitting your registration information to SearchNetworking.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchNetworking.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

An interface refers to what network interface cards (NIC) you are using to monitor the network. Then interface is typically selected by entering syntax such as eth0 or eth1. As an example, "snort -d -i eth0"

This was first published in October 2010