RE: Bridge IDS

["DeGennaro, Gregory" <Gregory_DeGennaro () csaa com>]

This is good too and you can tap the line as well.

With the span, hub, or the tap, it does not have to be a bridge unless you
are going to use snort as an IPS?

Regards,

Greg DeGennaro Jr., CISSP, CCNP
Systems Engineer

"Network Security is Y2K without the deadline" - Network Security Secrets
and Solutions 1999



-----Original Message-----
From: Jeff Dell [mailto:jdell () activeworx com] 
Sent: Thursday, August 05, 2004 7:43 AM
To: 'Lee Sheng'; focus-ids () securityfocus com
Subject: RE: Bridge IDS

If you are looking for something low cost and you have minimal bandwidth..
Try a hub (not a switch). It is cheap and you can monitor all network
traffic that flows across it.

Jeff 

-----Original Message-----
From: Lee Sheng [mailto:momosisco () hotmail com] 
Sent: Wednesday, August 04, 2004 8:48 PM
To: focus-ids () securityfocus com
Subject: Bridge IDS

All,


Perhaps this is silly question, however I wanna know that if bridge firewall

can be done, how about building a bridge IDS. I know there is 
snort-inline(consoder IPS) that we can use but what I mean is just snort 
without patching. Using three network interface, two for building a bridge 
and one for console. Can it be done? Tap is far too expensive for individual

like me :)

Any suggestion would be appreaciated! Thanks.


Regards,
Lee

_________________________________________________________________
Using a handphone prepaid card? Reload your credit online! 
http://www.msn.com.my/reloadredir/default.asp


--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
learn more.
--------------------------------------------------------------------------




--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to
learn more.
--------------------------------------------------------------------------

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE
IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 to learn more.
--------------------------------------------------------------------------