Using snort on a switched network

["Linux Boy" <cslinuxboy () hotmail com>]

Hello Everyone,

     One quick question.  How does snort do NID on a switched network?  Is 
it less productive on a switched network?  The reason is is that I am on a 
switched network and would like to use snort.  However, my whole network is 
behind our firewall and many people suggested not to run snort on the same 
machine as the firewall.  So if I run snort on another machine outside the 
firewall, but on the same network as the firewall (also switched), will 
snort detect port scans, etc. directed towards my firewall and machines 
behind it?  If so, how does it work?  Thanks in advance.

Mike

_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users