Snort mailing list archives

Re: ideal setup


From: quentyn () fotango com
Date: Wed, 07 Aug 2002 19:12:37 +0100

Robert Cole wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Whats the ideal setup for snort? I'm just now getting into it and reading up
on it and it looks like a good way to go is put snort on the firewall machine
and have it log to a syslog server. Correct?

Robert



an ideal set-up would be to have hardware ether taps running to
dedicated sensors. They feed into db servers ( what ever your poison)
all running on a separate network not connected to any other network.
Alerts are via festival ( the voice sysnthsis prog) and SMS (so are one
way only) 

this is my dream set-up but is not practical in may situations ( though
it is virtually uncomprimiseable)

Q

-- 
#####################
Quentyn Taylor
Sysadmin - Fotango
#####################
Quidquid latine dictum sit, altum viditur (anything said in Latin sounds
lofty)


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: