Snort mailing list archives
snort implement questions?
From: Vincent Chen <vcba79 () ms1 hinet net>
Date: Fri, 26 Jul 2002 10:42:27 +0800
Dear all, I got 2 questions about snort implement: 1. if I connect snort to a HUB, promiscuous mode should be enabled to let snort see all activities. right? But if I run snort on a gateway which also act as firewall, is it necessary to enable promiscuous mode? all inbound and outbound traffice will go through this box in this case. 2. I saw an article which mentioned TAP device recently. I don't quite understand this article. if my switch can redirect all traffic to the port which snort box connected to, do I need such a device? Best regards, Vincent Chen ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- snort implement questions? Vincent Chen (Jul 26)
- <Possible follow-ups>
- RE: snort implement questions? Moyer, Shawn (Jul 26)
- RE: snort implement questions? Steve Scott (Jul 26)
- RE: snort implement questions? Moyer, Shawn (Jul 26)