Snort mailing list archives
How to setup inline
From: Mike Montgomery <mmontgomery () c3bb com>
Date: Fri, 07 Apr 2006 16:39:46 -0400
Hello,I recently setup a box running snort at our headend, its not inline as of now, but its using a monitor port on a cisco 2950. What would be the ideal setup to put the box inline? I currently have 2 nics in this box, 1 on the monitor port, 2nd is the nic I use to connect to the box for console. To go inline, would I need 3 nics total, 1 in, 1 out, and set them to be bridged? Or what. If I wanted snort to drop the packets for say P2P, would snort do that by itself, or would I need to have a firewall running to do that. Just trying to make some sense of this.
Thanks Mike Montgomery Citizens Communications Corp. /Systems Administrator/ ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How to setup inline Mike Montgomery (Apr 07)
- Re: How to setup inline Eric Hines (Apr 07)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Will Metcalf (Apr 09)
- Re: How to setup inline Eric Hines (Apr 09)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Eric Hines (Apr 09)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Will Metcalf (Apr 10)
- Re: How to setup inline Eric Hines (Apr 07)