RE: Monitor multiple VLANs

["Jake Seitz" <jseitz () firstam com>]

Not sure about windows (I think the higher end Compaq/HP include NIC drivers
for tagged interfaces, not sure though), but we have done VLAN tagging under
RH7.x without problems.

Just set your switch port as a trunk, verify that its using 802.1q
encapsulation, include your vlans and you "should" be off to the races.

Just a thought

Jake S
First American Corp.
http://www.firstam.com

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Martin Jr.,
D. Michael
Sent: Thursday, October 16, 2003 7:50 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Monitor multiple VLANs


I was wondering if anyone out there has been successful in configuring
Snort to monitor traffic on multiple VLANs.  If so, how did you
accomplish this?  We are basically a "Cisco-shop" and are thinking of
segmenting our residence halls (and other areas) into separate VLANs for
security and virus propagation defense.  However, we would like to
configure our Snort box (Windows 2000) to actually be able to see and
"sniff" the traffic on all of the VLANs.

Any suggestions?

Thanks,

Michael Martin
University of Montevallo


-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users