RE: Snort Implementation Guide - ACID-MySQL-Redhat7 .2

[twig les <twigles () yahoo com>]

Actually I just looked at the conceptual placement and
thought it made a lot of sense.  The hubs are the
cheapest way to do this, and if you save $150 while
increasing the confusion, then IMHO it's not worth it.
 


--- Jack Lyons <jack.lyons () martinagency com> wrote:
> I would like to get people's view points on using 1
> hub for all three
> locations.
>
> As long as the IP addressing scheme are different,
> it shouldn't matter
> correct?
>
> Also, you can buy 4 port hubs for under
> $100...doesn't seem to expensive.
>
> > -----Original Message-----
> > From: Iñaki Martínez [mailto:imd () hostalia com]
> > Sent: Tuesday, July 23, 2002 5:09 AM
> > To: Steve Scott
> > Cc: snort-users () lists sourceforge net
> > Subject: Re: [Snort-users] Snort Implementation
> Guide -
> > ACID-MySQL-Redhat7.2
> >
> >
> > Hi!!!
> >
> > > I recently finished a large scale deployment of
> snort sensors, and
> > > produced a guide.  Your can find it at
> > > http://home.earthlink.net/~sjscott007/
> > >
> > > Let me know what you think.
> >
> >  Really GOOD work........
> >
> >  I would ask you two questions:
> >
> >  In the graph "Conceptual Physical IDS Layout":
> >
> >  1) if there is nothing between firewall and
> internet, how to 
> > implement
> > the external IDS????
> >
> >  2) how to substitute (use other method) the
> HUBs???
> >     I think that use 3 HUBS and each of them use
> only 3 ports it is
> > expensive.
> >
> >
> >  Thanks for your guide!!!!!!!
-------------------------------------------------------
> > This sf.net email is sponsored by:ThinkGeek
> > Welcome to geek heaven.
> > http://thinkgeek.com/sf
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or
> unsubscribe:
> >
https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
-------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or
> unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
All warfare is based on deception.
-----------------------------------------------------------

__________________________________________________
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users