RE: Snort On win2k server

["Francois CONTAT" <Francois.CONTAT () fr tiscali com>]

Hello,

You can find good documentation at this page : http://www.snort.org/docs/snort-win2k.htm
Next, the best way to use snort is to connect the snooping interface on the same switch that your IIS is connected to. 
Then you configure your switch to monitor the IIS's port to the snort's port (snooping interface). 

I think that are the best ways to manage your snort for analyzing the IIS's traffic.


> -----Message d'origine-----
> De : Hamish McDermid [mailto:hamishm () mailbox co za]
> Envoyé : mardi 3 juin 2003 12:30
> À : snort-users () lists sourceforge net
> Objet : [Snort-users] Snort On win2k server
>
>
> Hi
>
> I am running a Win2k server as a web server. It runs SQL Server 2000,
> and IIS 5. I'd like to use snort to see who is attacking this
> webserver, and what attacks they are using. What are the best ways of
> setting snort up to do this, and where can i find good documentation
> on using snort on win2k?
>
> Thanks
> H
> ______________________________________________________________
> _________
> Cool Connection, Cool Price, Internet Access for R59 monthly @ WebMail
> http://www.webmail.co.za/dialup/
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: eBay
> Get office equipment for less on eBay!
> http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users