add usage examples with live interfaces

thanks to Aman Mangal <mangalaman93@gmail.com> for reporting the problem

diff --git a/doc/start.txt b/doc/start.txt
index 8dcb857cac63601ead9b7250af77297fa7318d27..ae580842df61a42093d0ee7354184a17cfcf2ef1 100644 (file)
--- a/doc/start.txt
+++ b/doc/start.txt
@@ -133,6 +133,8 @@ Then give it a go:
     $my_path/bin/snort -c $my_path/etc/snort/snort.lua -R $my_path/etc/snort/sample.rules \
         --pcap-filter \*.pcap --pcap-dir <dir> -A alert_fast -n 1000 --max-packet-threads 8
 
+For more examples, see the usage section.
+
 
 === Tips
 

diff --git a/doc/usage.txt b/doc/usage.txt
index 52af6e03bd2fa4716b384de01f48a5085764b42d..04cd1366dc20621f8296babfe17afe1a4b69c7c2 100644 (file)
--- a/doc/usage.txt
+++ b/doc/usage.txt
@@ -111,6 +111,15 @@ input source on a separate thread:
     snort -c $my_path/etc/snort/snort.lua --pcap-dir /path/to/pcap/dir \
         --pcap-filter '*.pcap' --max-packet-threads 8
 
+Run Snort++ on 2 interfaces, eth0 and eth1:
+
+    snort -c $my_path/etc/snort/snort.lua -i "eth0 eth1" -z 2 -A cmg
+
+Run Snort++ inline with the afpacket DAQ:
+
+    snort -c $my_path/etc/snort/snort.lua --daq afpacket -i "eth0:eth1" \
+        -A cmg
+
 
 === Plugins