Snort mailing list archives

Re: Running snort on a firewall


From: "Bruno Gimenes Pereti" <pereti () ump edu br>
Date: Thu, 20 Dec 2001 16:35:17 -0200

First, you don't need to run it on your firewall to monitor it all. Second,
yes you can run it on your firewall if you have enought memory, processor
and disk space.

I run snort in my firewall because I can monitor both side of it without
spending another machine for that.

Hope it helps,

Bruno.

----- Original Message -----
From: "Linux Boy" <cslinuxboy () hotmail com>
To: <snort-users () lists sourceforge net>
Sent: Thursday, December 20, 2001 4:12 PM
Subject: [Snort-users] Running snort on a firewall


Hello Everyone,

     I am new to snort.  I tried some examples on a LAN workstation, now I
want to see and monitor it all.  We have a linux firewall running
netfilter/iptables.  Can I run snort on the firewall without impacting the
firewalls performace/security.  Any advise would be good.  Thanks in
advance.

Mike

------ Begin Geek CODE ------------------------------------
GCS/GCC d--(d++) s: a--<<a? C+++ L++++ P+ E- W++>>+++ N+ o+ K?? !!!!!!!!w
O- M->L V PS+ !PE>PE!! Y++ PGP++ t+++@DATA !5 X+ !!!R->>R-- tv b++@!SAUNI
DI
D+ G e++>>AS400/HAL h++(h!) r-!r+++ y+
------------ End of Geek CODE -----------------------------

_________________________________________________________________
Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: