Re: What can Snort listen for?

[ashley thomas <athomas () unity ncsu edu>]

Yes. That is what Snort is for (watch the network traffic promiscously)
... it sees all the packets on the network  (provided it is a BUS topology)
If it is switched network , then B sees only packets destined to it or going
from it.



Hi all,

I have something not very clear... Suppose I have the network in the
below:

     +-----------------> |  10BASE-T Hub | <------------+
      |                                          ^
               |
      |                                           |
                |
  ---------                 -------------------------
----------
  | Host A |               |  Host B (running Snort)  |          | Host
C |
  ----------               -------------------------
----------

In this example, can the Host B capture all the traffic between Host A
and C?

Thanks in advacne.
--
steven

home page: http://steven4u.net
tel:       +86 760 8320102
rfc-822:   steven () steven4u net

              \|||/
             (o o)
----ooO-(_)-Ooo--------
If money could talk, it would say - goodbye



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users