Snort mailing list archives
Advice on Snort Inline
From: Mark Rohrbeck <mark.rohrbeck () gmail com>
Date: Fri, 8 Sep 2006 08:12:50 -0400
Hi all, I have 2 IDS systems in place and tuned to their specific networks, the next step I want to take is running them with Snort_inline. I am just a little unsure on how to do this. I would prefer to use Fedora Core 5 as the OS but open to suggestions. I mainly want to find out if I can run Snort_inline on one box? The networks are pretty small with 10 - 50 XP PC's and server 2003 / 2000, we run Sonicwall firewalls and I have the Sensors behind the firewall. The picture I have in my mind is having 3 nics in the machine, 1 for Admin and the other 2 for Snort inline. Am I heading in the right direction here? Any advice / help GREATLY appreciated. Marklar ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Libcap problem with Snort configuration Alejandro (Sep 07)
- Advice on Snort Inline Mark Rohrbeck (Sep 08)
- Re: Advice on Snort Inline Joel Esler (Sep 08)
- Re: Advice on Snort Inline Eric Hines (Sep 08)
- Re: Advice on Snort Inline Jason Brvenik (Sep 08)
- Re: Advice on Snort Inline Joel Esler (Sep 08)
- Advice on Snort Inline Mark Rohrbeck (Sep 08)