Re: Raq1 snort question...

[Izumi Tsutsui <tsutsui%ceres.dti.ne.jp@localhost>]

nimitz%nimitzbrood.com@localhost wrote:

> Is the Raq1 capable of promiscuous mode on tlp0?

It should.

> I was thinking about using my final Raq for a snort listener.  Snort 
> seemed to make on the box but I can't seem to make it listen to anything 
> but its own interface.

You can check it by tcpdump(8).

Modern intelligent switches won't pass packets not for your RaQ,
as the snort FAQ says?
---
Izumi Tsutsui