Snort mailing list archives
Monitoring Multiple Subnets
From: Shaun Marlin <shaun.marlin () canalta com>
Date: Mon, 13 May 2013 15:03:56 +0000
I am building a SNORT box to monitor my network. I have 2 ISP's. Is it possible to have the 2 ISP's connect into an unmanaged switch, then have SNORT configured with an IP from each block that I have, and finally pass the traffic back onto the switch that goes into my network? Sorry for the run on question there Essentially I am looking for something like this [cid:image002.png@01CE4FB8.CC852E20] [cid:image006.png@01CE4FB8.CC852E20] [cid:image001.png@01CE4FB8.CC852E20] [cid:image001.png@01CE4FB8.CC852E20]ISP 1 Router 1 Internal Network [cid:image004.png@01CE4FB8.CC852E20] [cid:image004.png@01CE4FB8.CC852E20] [cid:image011.png@01CE4FB8.CC852E20]ISP 2 Router 2 [cid:image013.png@01CE4FB8.CC852E20] SNORT Unmanaged Switch SNORT would endup monitoring 3 different subnets. For instance 1.1.1.0/27 2.2.2.0/27 and 3.3.3.0/29. Does anyone see a reason why this would not work Shaun Marlin Network Administrator [cid:canaltalogobc15d2] Canalta Family of Companies 2109 - 545 Highway 10 East Drumheller AB Canada T0J 0Y0 PHONE: (403) 820-3865 CELL: (403) 334-1313 EMAIL: shaun.marlin () canalta com WEB: www.canalta.com
------------------------------------------------------------------------------ Learn Graph Databases - Download FREE O'Reilly Book "Graph Databases" is the definitive new guide to graph databases and their applications. This 200-page book is written by three acclaimed leaders in the field. The early access version is available now. Download your free book today! http://p.sf.net/sfu/neotech_d2d_may
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- Monitoring Multiple Subnets Shaun Marlin (May 13)
- Re: Monitoring Multiple Subnets Seth Dunn (May 13)
- Re: Monitoring Multiple Subnets Shaun Marlin (May 13)
- Re: Monitoring Multiple Subnets Caleb Jaren (May 14)
- Re: Monitoring Multiple Subnets Shaun Marlin (May 13)
- Re: Monitoring Multiple Subnets Seth Dunn (May 13)