NDR Sensor CLI

set sniffing-interface <available-for-sniffing-interface-arg> [mode <sniffing-mode-arg> mtu <sniffing-mtu-arg>]

Set a specific sniffing interface in the system. Once set, the network traffic from the sniffing interface will be captured to identify and alert on potential security threats and malicious activity.

Parameters:

Option	Description
<available-for-sniffing-interface>	Network interfaces available for sniffing interface configuration.
<sniffing-mode>	Sniffing mode argument. Allowed values: NATIVE, COMPAT
<sniffing-mtu>	MTU for sniffing interface (NATIVE mode MTU range 2048-9000, COMPAT mode MTU range 1400-1500)

Example:

ndr-sensor> set sniffing-interface eth0 mode NATIVE mtu 2048 Sniffing interface eth1 with PCI address 0000:0b:00.0 is requested to be set in mode SNIFF_NATIVE Please monitor the bind status through cmd 'get sniffing-interfaces' It may take up to a minute for binding to complete and sniffing service to start, check cmd 'get service sniffing'