Re: snort problems

[Jules Pagna Disso <jules () visionintel com>]

Hello,

You can do pretty much everything you want with Snort. It's really up to
you to decide how, where, and why you would like to deploy Snort. You might
want to consider Alienvault to help you to manage multiple sensors.

I suggest you:

   - Decide what role snort is going to play.


   - Are you thinking of deploying snort in all 1800 systems?
      - Do you want Snort to record traffic?
      - Is snort used as a sensor to report to something else?
      - please read the following article on deploying snort on large
   network
      - Intrusion Detection on a Large Network  [
      http://www.sans.org/reading-room/whitepapers/intrusion/intrusion-detection-large-network-1366]

hope this helps.

Jules


On 21 August 2013 12:52, farshad taebi <farshad_taebi () yahoo com> wrote:

> hi
> im searching for a solution in my organization
> for intrujen detection systems
> but our network are 4 department and about 1800 end user.
> can snort run as distributed? I know that snort has some mojule,can it run
> on multicore systems?
>
>
> ------------------------------------------------------------------------------
> Introducing Performance Central, a new site from SourceForge and
> AppDynamics. Performance Central is your source for news, insights,
> analysis and resources for efficient Application Performance Management.
> Visit us today!
> http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
> _______________________________________________
> Snort-devel mailing list
> Snort-devel () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-devel
> Archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel
>
> Please visit http://blog.snort.org for the latest news about Snort!
------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and 
AppDynamics. Performance Central is your source for news, insights, 
analysis and resources for efficient Application Performance Management. 
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk

_______________________________________________
Snort-devel mailing list
Snort-devel () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-devel
Archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-devel

Please visit http://blog.snort.org for the latest news about Snort!