[Oisf-users] options for multiple interfaces

[Peter Manev]

> On 3 okt 2013, at 01:54, Theodore Elhourani <theodore.elhourani at gmail.com> wrote:
> 
> Would this be the correct syntax for starting suricata with multiple interfaces using afpacket?
> 
> suricata --af-packet=eth1 --af-packet=eth2 …..
> 
> I have tried this and it  is reading only from eth1.

Do you have those interfaces configured in suricata.yaml ?


> 
> Thanks!
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
> OISF: http://www.openinfosecfoundation.org/