I have changed the config in /etc/init.d/snortd to eth1 but when I run a "ps
aux grep snort" I still that eth0 is being used and if I grep eth in
/etc/snort/snort.conf there is no reference to use eth0

I want to configure snort to pull traffic from both eth0 and eth1 but mostly
eth1.



Jim