On Monday 06 November 2006 21:59, Hans-Werner Hilse wrote:
> > I would like to reverse those two names, so that snort can use the
> > higher capacity card for its sniffer. I am not quite sure where to
> > look even to begin this process.
>
> You can give arbitrary names to those interfaces by configuring udev
> appropriately:
>
> e.g. /etc/udev/rules.d/10-my-own-rules:
> ---snip
> KERNEL=="eth*", SYSFS{address}=="00:12:34:fe:dc:ba", NAME="eth-lan"
> KERNEL=="eth*", SYSFS{address}=="00:56:78:98:76:54", NAME="eth-sniff"
> ---snipYou could also just tell Snort to use eth1. But this is useful info. - Noven -- >-- Novensiles divi Flamen --< >---- Miles Militis Fons ----<
pgpA7esC1KAQL.pgp
Description: PGP signature
