Snort mailing list archives
Re: Snort Deployment Configurations
From: Martin Holste <mcholste () gmail com>
Date: Mon, 7 Feb 2011 12:39:31 -0600
BTW, I tend to prefer SANCP to collect data in a format more conducive for analysing "flows at rest".
Yes SANCP is awesome! I just wish it didn't require a span/tap at every sniff point. For branch offices, netflow is usually the only option. A netflow converter/plugin for SANCP would be very cool so that two separate reporting infrastructures weren't required. ------------------------------------------------------------------------------ The modern datacenter depends on network connectivity to access resources and provide services. The best practices for maximizing a physical server's connectivity to a physical network are well understood - see how these rules translate into the virtual world? http://p.sf.net/sfu/oracle-sfdevnlfb _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort Deployment Configurations Michael Lubinski (Feb 03)
- Re: Snort Deployment Configurations waldo kitty (Feb 03)
- Re: Snort Deployment Configurations Martin Holste (Feb 03)
- Re: Snort Deployment Configurations Jason Haar (Feb 06)
- Re: Snort Deployment Configurations Crusty Saint (Feb 07)
- Re: Snort Deployment Configurations Ray Caparros (Feb 07)
- Re: Snort Deployment Configurations Martin Holste (Feb 07)
- Re: Snort Deployment Configurations Jason Haar (Feb 06)
- Re: Snort Deployment Configurations Bamm Visscher (Feb 07)
- Re: Snort Deployment Configurations Martin Holste (Feb 07)
- Re: Snort Deployment Configurations Joel Esler (Feb 07)
- Re: Snort Deployment Configurations Martin Holste (Feb 07)