RE: Bridge IDS

["Jeff Dell" <jdell () activeworx com>]

If you are looking for something low cost and you have minimal bandwidth..
Try a hub (not a switch). It is cheap and you can monitor all network
traffic that flows across it.

Jeff 

-----Original Message-----
From: Lee Sheng [mailto:momosisco () hotmail com] 
Sent: Wednesday, August 04, 2004 8:48 PM
To: focus-ids () securityfocus com
Subject: Bridge IDS

All,


Perhaps this is silly question, however I wanna know that if bridge firewall

can be done, how about building a bridge IDS. I know there is 
snort-inline(consoder IPS) that we can use but what I mean is just snort 
without patching. Using three network interface, two for building a bridge 
and one for console. Can it be done? Tap is far too expensive for individual

like me :)

Any suggestion would be appreaciated! Thanks.


Regards,
Lee

_________________________________________________________________
Using a handphone prepaid card? Reload your credit online! 
http://www.msn.com.my/reloadredir/default.asp


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
learn more.
--------------------------------------------------------------------------




--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------