IDS mailing list archives

Re: Multiple network segment monitor with Snort


From: "Anton A. Chuvakin" <anton () chuvakin org>
Date: Thu, 25 Sep 2003 17:31:07 -0400 (EDT)

Can I use the same physical machine (with as many ethernet cards as
sensors I want to deploy) and use various and independent snort
processes? I neither know if only one Snort process can control
Here is one way to do it for multiple VLANs or just multiple network
cards (full HOWTO):

http://www.securityfocus.com/infocus/1640
http://www.securityfocus.com/infocus/1643

Best,
-- 
  Anton A. Chuvakin, Ph.D., GCI*
     http://www.chuvakin.org
   http://www.info-secure.org


---------------------------------------------------------------------------
Captus Networks IPS 4000
Intrusion Prevention and Traffic Shaping Technology to: 
 - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
 - Automatically Control P2P, IM and Spam Traffic
 - Precisely Define and Implement Network Security & Performance Policies
FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo 
http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
---------------------------------------------------------------------------


Current thread: