Snort mailing list archives
Re: I'm a snort virgin
From: twig les <twigles () yahoo com>
Date: Tue, 18 Mar 2003 13:35:27 -0800 (PST)
Yuppers, you need to consult the documentation for whatever hub/switch thingy you have to see if it can work. Look for words like: sniff, SPAN (Cisco term), mirror, monitor. It may be cheaper for you to get a box with 5 nics, 4 for monitoring and one for maintanence, although usually it's cheaper to just get a proper switch. As for getting everything to report to a database or whatever, check out www.snort.org/docs for the *nix guides, and silicon defense's site for windows guides. BTW, great tag line about the angel ... very creepy :) --- Angel Gabriel <badmangabriel () lycos co uk> wrote:
've been looking into snort, and I'd like to install it on it's own dedicated box to monitor my network. But, I have a slight problem, I have switched hubs, and it's my understanding that not all data travels past all machines on a network with switched hubs. Would this mean that I have to install multiple instances of snort on all the diffrent segments of the network?? And if I did, is it possible to get them all to report to one file, or database?? -- ***** Not everyone is touched by an Angel... ... Those that are, never forget the experience ***** ------------------------------------------------------- This SF.net email is sponsored by: Does your code think in ink? You could win a Tablet PC. Get a free Tablet PC hat just for playing. What are you waiting for? http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
===== ----------------------------------------------------------- Know yourself and know your enemy and you will never fear defeat. ----------------------------------------------------------- __________________________________________________ Do you Yahoo!? Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop! http://platinum.yahoo.com ------------------------------------------------------- This SF.net email is sponsored by: Does your code think in ink? You could win a Tablet PC. Get a free Tablet PC hat just for playing. What are you waiting for? http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- I'm a snort virgin Angel Gabriel (Mar 18)
- Re: I'm a snort virgin twig les (Mar 18)
- RE: I'm a snort virgin Ray Ellington (Mar 18)
- <Possible follow-ups>
- RE: I'm a snort virgin L. Christopher Luther (Mar 18)
- I'm a snort Virgin Angel Gabriel (Mar 19)