Snort mailing list archives
Re: Prevent ARP attack on NIDS sniffer.
From: Erek Adams <erek () snort org>
Date: Mon, 25 Aug 2003 12:10:26 -0400 (EDT)
On Mon, 25 Aug 2003, Sam Wun wrote:
How can I configure a NIDS sinffer to avoid ARP attack? If an NIC of the NIDS configured without IP but still need to enabled MAC configured (by default assigned by system). May be my question is out of scope, but really wondering how to hide MAC as well?? and the impact to the NIDS?
Use a ethernet tap. Use a ReadOnly cable. Done. :) ----- Erek Adams "When things get weird, the weird turn pro." H.S. Thompson ------------------------------------------------------- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machine. WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Session statistics John Creegan (Aug 21)
- Re: Session statistics Erek Adams (Aug 21)
- Re: Session statistics Andrew R. Baker (Aug 22)
- Re: Session statistics Andreas Östling (Aug 22)
- Prevent ARP attack on NIDS sniffer. Sam Wun (Aug 24)
- Re: Prevent ARP attack on NIDS sniffer. Edin Dizdarevic (Aug 25)
- Re: Prevent ARP attack on NIDS sniffer. Erek Adams (Aug 25)
- Prevent ARP attack on NIDS sniffer. Sam Wun (Aug 24)
- Re: Session statistics Bamm Visscher (Aug 22)
- <Possible follow-ups>
- Re: Session statistics Richard Bejtlich (Aug 25)
- Re: Session statistics Erek Adams (Aug 21)