Snort mailing list archives
RE: NIDS
From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Thu, 18 Jul 2002 17:38:02 -0400
In a nutshell: You have to set your HOME_NET variable correctly, the interface must be in promiscuous mode (this is default unless you turn it off), and you must have the sensor placed correctly within your network topology. As far as placing your sensor correctly is concerned, that's for you to know. You know your network and your hardware, which are the relevant variables. Find a point where you can see what you want to see, and configure what you need to configure (hardware, VLAN, etc.) to achieve the desired result. Cheers Keith
-----Original Message----- From: Brandon Harms [mailto:brandonharms () sdln net] Sent: Thursday, July 18, 2002 5:21 PM To: Snort Subject: [Snort-users] NIDS I got snort set up and working, but I noticed that it only seems to monitor the traffic going to the machine that has snort installed on it. How do I get it to monitor the whole network? Thanks. ____________________________ Brandon Harms South Dakota Library Network brandonharms () sdln net (605) 642-6253 ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users