Re: One Simple Question ?

[AllowOverride <allowoverride () gmail com>]

that was a simple answer,,, i wonder if that helped ibrahim... i pretty
sure the dog picture didnt help him much, 
nor the simple reply by jj...


i think a more valuable answer would have been FIRST to ask if they are
a student... 
then move on to the typical replies, We do not do your home work here...

rather than be community and ask:

Hi ibrahim, well you could first explain a little bit about your
background with snort, is this your first time using out program?
If you have some backgound in Daq, and NFQ, it would be more helpful, as
these concepts can be a bit daunting.

however, if you are up to speed, like most of us wizards with egos the
size of ID, then, 
iptables / ipfw etc... you will need to do NAT or routing through the
one interface kinda thing and use a daq like NFQ..

otherwise, we would be glad to assist you as we ask a few questions, and
with the provided input from you, we can 
better assist you No Problem.

Oh and Welcome to our community, I just noticed this is your first email
we received in the logs, and we surely 
would like to help all new members to this list, not necessarily to
snort in general. Our software has been out there 
for a long time, and it's good to have you here in anyevent....

thanks! have a wonderful day, and look forward to getting your snort box
up and running!

l8,
signed, whomever 

there are my 2 bytes

ps. there is no simple question here, but very simple answers usually...
heads up Mr. Lubis
> --- Begin Message ---
>
>
> From: JJC <cummingsj () gmail com>
>
> Date: Mon, 8 Oct 2012 11:14:05 -0600
>
> iptables / ipfw etc... you will need to do NAT or routing through the one
> interface kinda thing and use a daq like NFQ..
>
> JJC
>
> On Mon, Oct 8, 2012 at 8:35 AM, Ibrahim Lubis <baim.lubis () gmail com> wrote:
>
> > One Simple Question, :)
> > Can I Run Snort in inline mode with one interface ? i only see alot when
> > googling snort in inline mode with 2(bridging)  or 3( +1 management )
> > interface.
> >
> > Thx
> >
> >
> > ------------------------------------------------------------------------------
> > Don't let slow site performance ruin your business. Deploy New Relic APM
> > Deploy New Relic app performance management and know exactly
> > what is happening inside your Ruby, Python, PHP, Java, and .NET app
> > Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> > http://p.sf.net/sfu/newrelic-dev2dev
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> > Snort news!
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
>
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
>
> --- End Message ---
------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!