Snort mailing list archives
RE: New guy.
From: "L. Christopher Luther" <CLuther () Xybernaut com>
Date: Mon, 7 Apr 2003 14:21:14 -0400
Your question is not stupid -- just FAQless. ;) Check out: http://www.snort.org/docs/iss-placement.pdf http://www.snort.org/docs/faq.html#1.8 http://www.snort.org/docs/faq.html#2.1 Or in general: http://www.snort.org/docs/faq.html Cheers! -----Original Message----- From: Mike [mailto:nugget () chello se] Sent: Monday, April 07, 2003 1:50 PM To: snort-users () lists sourceforge net Subject: [Snort-users] New guy. Hi guys, Just signed up for this ML. Don't know about any rules or guide lines so bear with me. Anyways, I'm pretty new to both Linux and Snort (keeping an eye on HoneyD as well) and I guess my first question is kinda stupid: If I would like to monitor the activity on a network with all computers on the same subnet (the gateway is a firewall to the Internet). How would I set up Snort? On what computer can I run it to be able to listen to all traffic? I set up a test Snort but it would only see the traffic to the machine on which I ran it. Any ideas? Regards, Mike -- "I had a linguistics professor who said that it's man's ability to use language that makes him the dominant species on the planet. That may be. But I think there's one other thing that separates us from animals -- We aren't afraid of vacuum cleaners" ------------------------------------------------------- This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- New guy. Mike (Apr 07)
- Re: New guy. Erek Adams (Apr 08)
- <Possible follow-ups>
- RE: New guy. L. Christopher Luther (Apr 07)
- RE: New guy. Potts, Ross A. (Apr 07)