Snort mailing list archives
Re: how to span traffic to snort
From: Marcio Guerreiro <marcio.guerreiro () hotmail co uk>
Date: Sat, 13 Jun 2015 10:33:45 +0100
I think I found the answer . http://www.aboutdebian.com/snort.htm From: Marcio Guerreiro [mailto:marcio.guerreiro () hotmail co uk] Sent: 13 June 2015 10:10 To: snort-users () lists sourceforge net Subject: [Snort-users] how to span traffic to snort Hi everyone I think I am not far to make this work.. but I am stuck. I have three interfaces in my snort and I need to Span the traffic to snort (my snort is not configured as INLINE ) does anybody knows how to span the traffic to SNORT ? I am asking because my snort it's capturing the packets that are broadcasted only. I want to be able to see all traffic in my network. My networks cards are configured as follow: Eth0 - management interface Eth1 - configured as promiscuous Eth2 - configured as promiscuous Thank you in advance. Marcio
------------------------------------------------------------------------------
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- how to span traffic to snort Marcio Guerreiro (Jun 13)
- Re: how to span traffic to snort Marcio Guerreiro (Jun 13)