Snort mailing list archives
mirror port on dual interface running on snort
From: "sateesh" <sateesh.kumar () 247customer com>
Date: Mon, 15 Nov 2004 21:01:01 +0530
Hi 1) i have installed snort on dual interface server its working fine. 2) i configured Mirror port on switch port (this port will collect all VLAN info) | ===== with ip address 192.168.1.20 snort server with 2 nic |====== switch SPAN port(with out ip add) Right now i am getting snort alerts from only one subnet i.e 192.168.1.0..... If i configure snort on mirror port then i will get all subnet info (Ex:192.168.1.0,2.0,3.0 etc) So, pls let me know How to configure a snort on this scenario Regards, Sateesh Kumar.Kolagani ---------------------------------------------------------------------------- ---- |Network Engineer| 24/7 Customer |<Office: +91-40-23122247 xtn 105>|<Mobile: +91-98493-69829>|<Fax: +91-40-23122248>|mailto:sateesh.kumar () 247customer com| |<247 Customer, Level 1, Block "B", Cyber Gateway, Madhapur, Hyderabad-500081>| Website: www.247customer.com |
Current thread:
- mirror port on dual interface running on snort sateesh (Nov 15)