Snort mailing list archives
Re: snort setup
From: "Scot Scot" <scotw () hotmail com>
Date: Fri, 12 Jul 2002 17:41:35 -0500
If you put a HUB in you'll knock your traffic down to Half-Duplex Perhaps you could throw in a TAP: Cisco Router ----| Network TAP|-----------------HUB------------------Switch | | | Snort Sensor Here's one company (of many) off the top of my head: www.netoptics.com Scot ----- Original Message ----- From: "Tom Sevy" <tsevy () epx com> To: "user snort" <snort-users () lists sourceforge net> Sent: Friday, July 12, 2002 9:30 AM Subject: RE: [Snort-users] snort setup
I would recommend instead that you put a decent hub in rather than put the snort box inline. What happens when you have to reboot the snort server box? You (& your users & your web visitors) will lose the internet connection. So go with: Cisco Router ---------------------HUB------------------Switch | | | Snort Sensor -----Original Message----- From: Alwin Raymundo [mailto:alrayworld () yahoo com] Sent: Friday, July 12, 2002 7:36 AM To: user snort Subject: [Snort-users] snort setup Hi all, Here is my another naive question. I want to put my snort box in front of my switch because my swith is not capable of port mirroring. internet -> cisco router -> snort box -> switch -> servers My future setup on snort box (redhat 7.3, snort -mysql and 2 nic cards). here now the question about the 2 nic what should I used ip address to these 2 nic cards, should it be 2 public ip address? or 1 public IP address and 1 network address. any help would be highly appreciated. Thanks in advance, brother in snort. ===== Alwin Raymundo __________________________________________________ Do You Yahoo!? Sign up for SBC Yahoo! Dial - First Month Free http://sbc.yahoo.com ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Gadgets, caffeine, t-shirts, fun stuff. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort setup Alwin Raymundo (Jul 12)
- Re: snort setup Demetri Mouratis (Jul 12)
- <Possible follow-ups>
- RE: snort setup Tom Sevy (Jul 12)
- Re: snort setup Scot Scot (Jul 12)
- Message not available
- Re: snort setup Scot Scot (Jul 12)
- Re: snort setup on freebsd Ha Hoang (Sep 08)
- Re: snort setup Scot Scot (Jul 12)