Fongin1

Hello. I am new to Snort and was able to bring up a functioning IDS using your really easy to follow guide. This is an amazing learning experience. Using some of the other posts, I was able to go in and change credentials so it is a bit more secure. After the successful install, a requirement was added to have the box monitor multiple taps on 2 interfaces. Being new, I have scrambled around and found that it is possible by running multiple Barnyard2 & Snort instances. I have read Snort can run multiple instances inside itself on the one box. As long as you have separate Snort.conf files for each interface with a matching Barnyard2 instance logging will be fine. My issue is that I am struggling to figure out how to make this happen within the context of your guide. Any help that anyone could give me would be greatly appreciated. I have also seen bridging NICS can sort of lead to a similar result, but I wasn't sure if that was a viable option.