This is an old revision of the document!
monitor session 1 source interface f0/1 both monitor session 1 destination interface f0/2
server# ifconfig eth1|le1 up server# tcpdump -ni eth1|le1 -A -s 0 "port 80"
[server:~] # pkg_delete -x snort [server:~] # rm -r /usr/local/etc/snort/ root@server.corpX.un:~# apt-get purge snort