search

J-Gras / add-interfaces

Adds cluster node's interface to logs.
BSD 3-Clause "New" or "Revised" License
2 stars 3 forks source link

How to listen on two interfaces in standalone mode？ #4

Closed CindyStudyEveryday closed 2 years ago

CindyStudyEveryday commented 2 years ago

This script is applicable to the cluster pattern. In standalone mode, now I have the need to listen to two interfaces on a network, how should I operate? Hope to give some guidance.Thank you.

J-Gras commented 2 years ago

As far as I know, a single Zeek process can only listen to a single interface. Thus, you might try setting up a cluster with two workers, each listening to one of the interfaces.

Note that this is not the right place to ask for general advice about operating Zeek. Please use the Zeek community resources such as Discourse and Slack for follow-ups or further questions: https://zeek.org/community/