Snort mailing list archives
Issue with Sensors
From: "Shashi.P" <p.shashii () gmail com>
Date: Sat, 31 Oct 2009 12:33:20 +0530
could you please reply to this mail. -------------------------------- Thanks for your reply, Type of switch is Cisco. Currently 2 network port (eth0 & eth1) eth0 - Through which i am accessing with SSH eth1 - All the port in cisco switch are mirrored to eth1 (10.184.75.0) (One subnet) Snort installed on Fedora 10. Installed Snort 2.8,4 Base, barnyard2. I am able to get alert on web console. Please let us know how can i procced to configuration. On Wed, Oct 28, 2009 at 7:54 PM, Shenk, Jerry A <jshenk () decommunications com
wrote:
Can you give a little more details? What type of switch? Cisco switches have one way to monitor a port, each switch is completely different in execution but the concepts are similar. Are all 4 networks on the same switch? How many NICs are in your snort box? - having an individual NIC for each network is preferred but I suppose it's not the only option. If you're just getting started with Snort, I would definitely pick one network and monitor that one first...get that working, get an understanding how that works and the add the other networks. Having multiple NICs in a single box makes this quite a bit more complicated and requires a good understanding of linux (assuming a linux platform) because you'll need either sets of config files or variables in the config files. -----Original Message----- From: Shashi.P [mailto:p.shashii () gmail com] Sent: Wednesday, October 28, 2009 10:03 AM To: snort-users () lists sourceforge net Subject: [Snort-users] Issue with sensors Hi, What settings need to be done. Port on switch? What he need to enable on switch. (ie Sensor). i need to monitor 4 network PLease let me know what setting needs to be done on snort configuration? Regards. Shashi ------------------------------
------------------------------------------
------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Issue with sensors Shashi.P (Oct 28)
- Re: Issue with sensors Shenk, Jerry A (Oct 28)
- Re: Issue with sensors Shashi.P (Oct 29)
- <Possible follow-ups>
- Issue with Sensors Shashi.P (Oct 31)
- Re: Issue with sensors Shenk, Jerry A (Oct 28)