IDS mailing list archives
Re: Any known isssues
From: <ravivsn () roc co in>
Date: Fri, 30 Jan 2004 23:43:07 +0530 (IST)
Hmm, feel I should provide more info. I have a set-up in which I was running Nessus in external network and snort + honeyD in internal machine between which I have a box to be evaluated. Its not like I should run both of them in same machine. But wanted to know of any known issues in doing so. Thanks, -Ravi
Just an observation, why would you want to put your IDS on the same box as the target? Seems that if you weren't pressed for resources, you'd grab a LINUX low end box and run SNORT on it. Just put it between your DMZ and the Honeypot.From: Ravi <ravivsn () roc co in> Date: 2004/01/30 Fri AM 12:57:12 CST To: focus-ids () securityfocus com Subject: Any known isssues Hi All, Just curious to know whether there are any known issues in running honeyD and Snort in the same machine Like performance issues, increase in packet drops etc., Thanks in advance, -Ravi http://www.roc.co.in Note: Thanks J for the info, Sorry, this is the first time I posted addressing multiple lists in one mail. --------------------------------------------------------------------------- ---------------------------------------------------------------------------
--------------------------------------------------------------------------- ---------------------------------------------------------------------------
Current thread:
- Any known isssues Ravi (Jan 30)
- <Possible follow-ups>
- Re: Any known isssues ravivsn (Jan 30)