Re: General snort problem

["V." <debian22 () yahoo fr>]

> Not always.  You might have $HOME_NET set wrong.  Or, you could have one of
> those 'helpful' bits o' hardware that does odd things.  What type of a switch
>  it?  Can you run tcpdump/snoop/snort -dv on it and see any traffic?

I will do some testing with $HOME_NET.
The switch the IDS box is plugged into is an Extreme networks blackdiamond.
When I run snort -dv, I can see everything and not only the traffic directed to
the IDS box.

Thanks for your help.

Vi.

___________________________________________________________
Do You Yahoo!? -- Un e-mail gratuit @yahoo.fr !
Yahoo! Courrier : http://fr.mail.yahoo.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users