Snort mailing list archives

RE: Snort and Firewall on the same box


From: "Steve Shockley" <steve.shockley () shockley net>
Date: Fri, 11 May 2001 22:53:45 -0400

      Sorry to dig up an old thread which I don't recall ever 
being satisfactorily resolved, but I've been pondering a good 
way to run snort and an FW on the same box and came up with 
this angle:  Your box has three NICs: eth0, 1, and 2.  Snort 

That seems pretty complicated.  I've used Snort on a machine running
ipf, and it seemed to work okay.  If you're going to go to all that
trouble, why not just plug an internal machine with clipped transmit
pairs into the hub, and save the firewall's processor power?




_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: