Snort mailing list archives

RE: Snort and portsentry on same host ?

From: "Martijn Heemels" <martijn () heemels com>
Date: Thu, 13 Dec 2001 00:46:43 +0100

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi there, does anyone know if Snort and Portsentry (in advanced 
mode) are able to run concurrently
on the same host (and nic).


Yes, i'm running it that way. They appear to function fine
together... each doing it's own thing...
If you're letting Portsentry adjust your ipchains/iptables rules you
will of course no longer see the traffic from the host you're
blocking, since it'll be impossible for that host to set up a TCP
connection to your host.

Hope this helps, Martijn

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBPBfsYxLMC0rbivl4EQJ0fgCfQQGmFrj+zNsA+hwNP3djxw5sLN4An30t
w+Fs/4Hhrse97XMCOvmedGHS
=XATo
-----END PGP SIGNATURE-----


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Current thread:

Snort and portsentry on same host ? Bo Jacobsen, SystemHouse (Dec 12)
- RE: Snort and portsentry on same host ? Martijn Heemels (Dec 12)
  - Sv: Snort and portsentry on same host ? Bo Jacobsen (Dec 13)
    - RE: Snort and portsentry on same host ? Martijn Heemels (Dec 13)
    - RE: Snort and portsentry on same host ? Franki (Dec 19)