Placement of Snort IDS

[Kenny D <bitored2002 () yahoo com au>]

Hi,

I need to know where exactly snort is placed in a
switched network. Is it setup with port mirroring or
in such a way that its a default gateway and all
traffic passes through?

Someone told me snort can drop packets based on the
rules but i thought it just logged packets when they
satisy rules as opposed to dropping them. I have set
it up with the firewall port mirroring to snort, is
this correct

Rgds.

http://www.sold.com.au - SOLD.com.au Auctions
- 1,000s of Bargains!

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users