From owner-freebsd-questions  Wed Aug  8 10:22: 9 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from maine.60north.net (unknown [198.143.201.10])
	by hub.freebsd.org (Postfix) with ESMTP id 3BAFB37B409
	for <freebsd-questions@freebsd.org>; Wed,  8 Aug 2001 10:22:07 -0700 (PDT)
	(envelope-from bill@maine.60north.net)
Received: from localhost (bill@localhost)
	by maine.60north.net (8.11.3/8.11.3) with ESMTP id f78HKfO78565
	for <freebsd-questions@freebsd.org>; Wed, 8 Aug 2001 13:20:41 -0400 (EDT)
Date: Wed, 8 Aug 2001 13:20:41 -0400 (EDT)
From: bill <bill@maine.60north.net>
To: freebsd-questions@freebsd.org
Subject: snort libpcap and any
Message-ID: <Pine.BSF.4.21.0108081316060.78548-100000@maine.60north.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Hi there, in the snort 1.8 documentation it states that if your running
multiple interfaces under linux and have libpcap installed you can use the
-iany switch to listen on all your interfaces. Has any one accomplished
this under FreeBSD? Is there a way I can make a bpf device which listens
on multiple interfaces? I really dont want to have to run multiple
instances of snort for every interface. 
Thanks for your time. 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message