Hello everyone,

I have Snort, LAMP and Acidbase installed on my Debian Lenny and when I go to the webpage from base I only see one sensor. How can I add more sensors to it so that I can monitor all of my NICS.

On the net I found out that you can bond NICS together but you still have one sensor which I don't want. I need multiple sensors that will monitor each of my NICS in my firewall

Bonding NICS:
Code:
# modprobe bonding
# ifconfig bond0 up
# ifenslave bond0 eth1
# ifenslave bond0 eth2
# snort -i bond0
There is a lot of documentation but all of it is very confusing for me.

In my /etc/init.d/runsnort.sh I have:
Code:
ifconfig eth0 up -arp
ifconfig eth1 up -arp
ifconfig eth2 up -arp
ifconfig tan0 up -arp
/etc/init.d/snort start
I have follow the following howto: www [dot] aboutdebian [dot] com/snort [dot] htm

I'm also starting to learn Linux so I'm not an expert in this.