RE: Preferrable location?

["Jason Lewis" <jlewis () packetnexus com>]

For a) I use this.

http://www.packetnexus.com/docs/packetnexus/NIDS_Placement.pdf

For b), one NIC could be used for packet capture and the other for
management (on an isolated subnet).

For c), You are venturing into the OS holy war.  Go with what you know.

Jason Lewis
http://www.packetnexus.com
It's not secure "Because they told me it was secure".
The people at the other end of the link know less 
about security than you do. And that's scary.


-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net]On Behalf Of Ronneil
Camara
Sent: Monday, November 19, 2001 9:06 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Preferrable location?


Hi,

I've got some questions.

a) Where would be the preferrable location of snort box on a network
with firewall (internal, dmz)? Do I need more than 1 snort?
b) What would be the advantage of having 2 nics on a snort box?
c) What o.s. is recommended for snort?

Thanks.

Neil

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list

<<attachment: winmail.dat>>