Re: How to monitor two different traffics with snort

[YARICK <yarick () yarick com>]

Why would you, in your right mind connect the same device to inside
and outside of your network?
Have you looked at a seim solution?!

On 6/5/09, Sandro guly Zaccarini <guly () luv guly org> wrote:
> On Fri, Jun 05, 2009 at 10:29:17AM -0400, Nigel Houghton wrote:
> > On Fri, Jun 5, 2009 at 10:10 AM, Luis Daniel Lucio
> > > Wait to 2.8.5 it has multi-iface capabilities.
> >
> > Here's a better idea:
> >
> > Two interfaces on the snort box, one connected to one side of the
> > firewall and the other to the inside of the firewall. Then start two
> > instances of snort, one per interface.
>
> so you are saying that multi-interface doesn't work very well?
>
> sz
>
> --
>   /"\   taste your favourite sysadmin
>   \ /   gpg public key http://www.guly.org/guly.asc
>    X
>   / \

-- 
Sent from my mobile device

--Yarick Tsagoyko

Advisory Notice: Email is covered by the Electronic Communications
Privacy Act and is legally privileged, but inherently insecure.
Content may be subject to alteration: email addresses may incorrectly
identify the sender. This email transmission, and any documents,
files, or previous email messages attached to it may be privileged and
confidential, and are intended only for the use of the recipient(s)
named in the address field. If the reader of this message is not an
intended recipient, or the employee or agent responsible to deliver it
to the recipient, you are hereby notified that any dissemination,
distribution, or copying of this message or its contents is strictly
prohibited. If you have received this message in error, please notify
me by telephone or return email and delete it and any attachments from
your computer.  Thank you.

------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises 
looking to deploy the next generation of Solaris that includes the latest 
innovations from Sun and the OpenSource community. Download a copy and 
enjoy capabilities such as Networking, Storage and Virtualization. 
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users