Snort mailing list archives
Re: How to setup inline
From: "Will Metcalf" <william.metcalf () gmail com>
Date: Fri, 7 Apr 2006 17:11:01 -0500
What distro are you thinking about using? If you do not wish to reply to the list with this information, you can reply to me off-list and I would be glad to point you in the right direction. Possibly help you avoid some distro related road bumps. Regards, Will On 4/7/06, Mike Montgomery <mmontgomery () c3bb com> wrote:
Hello, I recently setup a box running snort at our headend, its not inline as of now, but its using a monitor port on a cisco 2950. What would be the ideal setup to put the box inline? I currently have 2 nics in this box, 1 on the monitor port, 2nd is the nic I use to connect to the box for console. To go inline, would I need 3 nics total, 1 in, 1 out, and set them to be bridged? Or what. If I wanted snort to drop the packets for say P2P, would snort do that by itself, or would I need to have a firewall running to do that. Just trying to make some sense of this. Thanks Mike Montgomery Citizens Communications Corp. /Systems Administrator/ ------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- This SF.Net email is sponsored by xPML, a groundbreaking scripting language that extends applications into web and mobile media. Attend the live webcast and join the prime developer group breaking into this new coding territory! http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- How to setup inline Mike Montgomery (Apr 07)
- Re: How to setup inline Eric Hines (Apr 07)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Will Metcalf (Apr 09)
- Re: How to setup inline Eric Hines (Apr 09)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Eric Hines (Apr 09)
- Re: How to setup inline Mike Montgomery (Apr 09)
- Re: How to setup inline Will Metcalf (Apr 10)
- Re: How to setup inline Eric Hines (Apr 07)