Re: Newbie question -- Can Snort be installed in a routed mode instead of bridged mode?

[J Green <corpengineer () gmail com>]

Hello all:

Have been reading up on how to install Snort, and I have come across two
modes:  Bridged and SPAN.  Bridged mode would be preferable, but our
network is configured with layer 2 VLAN'ing, and an Etherchannel connecting
switches to the firewall.  So I do not see how I could physically connect
Snort in Bridged mode, since there is not just one connection from switch
to the firewall (where I could physically connect a Snort box inbetween).
Was wondering if Snort supports a Routed mode, where the incoming interface
is configured on one network subnet, and the outgoing interface is
configured on a different network subnet?  If so, could you please direct
me to supporting documentation re how to accomplish this?  My goal is to
have Snort inspect traffic from one internal network destined to another
internal network.

Thank you.

------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are 
consuming the most bandwidth. Provides multi-vendor support for NetFlow, 
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!