[root@resolute bin]# cat /etc/sguil/pads-ciscoE1.conf 
# ------------------------------------------------------------------------------
#
# pads.conf
#
# Matt Shelton <matt@mattshelton.com>
#
# This file contains configuration parameters for the PADS application.  Please
# visit http://passive.sourceforge.net for further information.
#
# $Id: pads.conf,v 1.2 2007/06/07 14:47:07 hanashi Exp $
#
# ------------------------------------------------------------------------------

# daemon
# -------------------------
# This parameter determines whether the application will go into the background.
# 0 = Disable, 1 = Enable
daemon 1

# pid_file
# -------------------------
# Filename of the pads PID file.  This value should be set if you are planning
# on using daemon mode.
pid_file /var/run/sguil/pads-ciscoE1.pid

# sig_file
# -------------------------
# Alternate location for the pads-signature-list file.
#sig_file /usr/local/pads/share/pads/pads-signature-list

# mac_file
# -------------------------
# Alternate location for the pads-ether-codes file.
#mac_file /usr/local/pads/share/pads/pads-ether-codes

# user
# -------------------------
# This is the name of the user pads-archiver will run as when started as root.
#user pads

# group
# -------------------------
# This is the name of the group pads-archiver will run as when started as root.
#group pads

# interface
# -------------------------
# This contains the name of the interface PADS will listen to.
#interface eth0
interface eth1

# filter
# -------------------------
# This value contains a libpcap filter to be applied to the PADS session.
#filter port 22

# network
# -------------------------
# This string contains a comma seperated list of networks to be monitored.
network 192.168.1.0/24

# output:  screen
# -------------------------
# This output plugin displays PADS data to the screen.  It is mainly used for
# debugging purposes.
#output screen

# output:  csv
# -------------------------
# This output plugin writes PADS data to a CSV file.  Optionally, a CSV filename
# can be specified as an argument.
#output csv: assets.csv

# output:  fifo
# -------------------------
# This output plugin writes PADS data to a FIFO file.  Optionally, a FIFO
# filename can be specified as an argument.
output fifo:  /nsm/snort_data/ciscoE1/pads.fifo