Snort mailing list archives
Re: Snort Topology Configuration
From: Jon Quiros <sysadmin () ncemch org>
Date: 24 Jun 2002 15:38:06 -0400
hmm, are you port mirroring to yout snort box on the switch? On Monday, June 24, 2002 3:15 PM, DThomaz () flowserve com wrote:
I have setup snort on my local LAN. The snort box is collecting only from my LAN. I want to sniff all packages that came from my WAN in to the LAN using snort. My question is that if I span the Ethernet port of my WAN router to the sniffer port should collect all WAN data coming in the LAN? Here is my network: ethernetport<router>WAN--------------CLOUD | | switch CAT4k | | Snort box Do I need any special configuration on the snort box to use the span command from the switch? Thanks for the support, dthomaz ------------------------------------------------------- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort Topology Configuration DThomaz (Jun 24)
- <Possible follow-ups>
- Re: Snort Topology Configuration Jon Quiros (Jun 24)
- RE: Snort Topology Configuration McCammon, Keith (Jun 24)
- Re: Snort Topology Configuration Jon Quiros (Jun 24)
- RE: Snort Topology Configuration Hutchinson, Andrew (Jun 24)