RE: Setting snort in a network

["Briggs, Bruce" <Bruce.Briggs () suny edu>]

I choose to have my Snort just behind my firewall so that it can see all
incoming & outgoing traffic.
My firewall has 2 inside interfaces, so I have 1 Snort process running
for each, 3 NICs total on my Snort box.
I use port mirroring on switches connected to each firewall inside
interface to get the packets to Snort.
 
Bruce

  _____  

From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of Narayan
Sivaramakrishnan
Sent: Thursday, May 05, 2005 11:02 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Setting snort in a network


hi all, 
I have installed snort on a linux box and have tested it..It works
fine...Now i want to put it on the real network....Can anybody suggest
me any documentation that would help me...I have also got a
firewall...how should the linux box be placed.. 
Please advice, 
Narayan