# Example node.cfg for Multi-Interface collection on one box

**URL:** https://community.zeek.org/t/example-node-cfg-for-multi-interface-collection-on-one-box/2961
**Category:** Zeek
**Created:** [January 9, 2014, 10:36pm UTC](https://community.zeek.org/t/example-node-cfg-for-multi-interface-collection-on-one-box/2961 "2014-01-09T22:36:24Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![Andy\_Schworer](https://avatars.discourse-cdn.com/v4/letter/a/46a35a/32.png) [@Andy\_Schworer](https://community.zeek.org/u/Andy_Schworer)
#### Post date: [January 9, 2014, 10:36pm UTC](https://community.zeek.org/t/example-node-cfg-for-multi-interface-collection-on-one-box/2961/1 "2014-01-09T22:36:24Z")

</div>

I’m having trouble finding complete documentation on how to configure a bro instance for monitoring multiple interfaces on the same host.

[bro]

type=standalone

host=localhost

interface=eth1

What needs to change to monitor eth1 & eth2?

---

<div class="post-metadata">

### Author: ![James\_inthe\_box](https://avatars.discourse-cdn.com/v4/letter/j/6f9a4e/32.png) [@James\_inthe\_box](https://community.zeek.org/u/James_inthe_box)
#### Post date: [January 9, 2014, 10:51pm UTC](https://community.zeek.org/t/example-node-cfg-for-multi-interface-collection-on-one-box/2961/2 "2014-01-09T22:51:09Z")

</div>

Assuming you're using broctl, add:

broargs = -i eth2

to your broctl.cfg file

James

---

<div class="post-metadata">

### Author: ![Charles\_A\_Fair](https://avatars.discourse-cdn.com/v4/letter/c/cdc98d/32.png) [@Charles\_A\_Fair](https://community.zeek.org/u/Charles_A_Fair)
#### Post date: [January 10, 2014, 1:32pm UTC](https://community.zeek.org/t/example-node-cfg-for-multi-interface-collection-on-one-box/2961/3 "2014-01-10T13:32:54Z")

</div>

Advanced Setup will prompt you to configure as may interfaces as you wish.

Chuck

---

<div class="post-metadata">

### Author: ![Charles\_A\_Fair](https://avatars.discourse-cdn.com/v4/letter/c/cdc98d/32.png) [@Charles\_A\_Fair](https://community.zeek.org/u/Charles_A_Fair)
#### Post date: [January 10, 2014, 1:34pm UTC](https://community.zeek.org/t/example-node-cfg-for-multi-interface-collection-on-one-box/2961/4 "2014-01-10T13:34:41Z")

</div>

Disregard my advice… that was specifically for Security Onion.

Chuck

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:41pm UTC](https://community.zeek.org/t/example-node-cfg-for-multi-interface-collection-on-one-box/2961/5 "2022-05-06T15:41:29Z")

</div>