IDS mailing list archives
Re: Multiple network segment monitor with Snort
From: Sergio Pozo Hidalgo <blitter_es () yahoo es>
Date: Wed, 01 Oct 2003 21:40:29 +0200
Forrest, Reid wrote:
Yes you can. We've deployed sensors with up to 12 NICs running independent snort processes. CPU utilization is surprisingly low. You can also use separate snort.conf files for each NIC so you can tweak the alerts for different networks (i.e. inside vs. outside).
Which hardware did you use to install 12 NICs? Cheers --------------------------------------------------------------------------- Captus Networks IPS 4000Intrusion Prevention and Traffic Shaping Technology to: - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
- Automatically Control P2P, IM and Spam Traffic - Precisely Define and Implement Network Security & Performance PoliciesFREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
---------------------------------------------------------------------------
Current thread:
- Re: Multiple network segment monitor with Snort Sergio Pozo Hidalgo (Oct 02)
- Re: Multiple network segment monitor with Snort Dpk (Oct 02)
- <Possible follow-ups>
- Re: Multiple network segment monitor with Snort Sergio Pozo Hidalgo (Oct 02)
- Re: Multiple network segment monitor with Snort Sergio Pozo Hidalgo (Oct 02)
- RE: Multiple network segment monitor with Snort kgeorgiades (Oct 06)