Re: snort and atm

[Matt Kettler <mkettler () evi-inc com>]

At 06:37 AM 2/8/2005, Teva AVRIL wrote:
> i'm planning to use snort to monitor an ATM connection, using a passive
> splitter to send all traffic to a linux box with an ATM card. Have anyone
> experimented the use of ATM cards in Linux with snort ?
>
> According some mails sent by snorts-users, It seems that snort doesn't
> handle ATM.

That's true as far as I know...


> So if it's not possible, i'd like to know if it's possible to monitor the
> traffic by forwarding the traffic coming in the atm card to an ethernet
> card (installed on the same station) and then monitor with snort?

That should work fine, although you need to make sure the packets can 
actually go out on the interface. Merely forwarding the packets won't work 
if they all get dropped due to lack of route.



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users