Is it possible to run IPAUDIT with multiple eth devices in the same config file?
(Oct 3, 2000) ipaudit is based on libpcap, and libpcap does not provide the ability to tap two interfaces at once. However, there is a possible, though ugly, workaround. Run two instances of ipaudit, one for each interface, and write the output to two separate files. THEN, use ‘total’ to combine them.