Snort mailing list archives

Re: how to configure dual-nic-setup-using-portscan


From: Nick Moore <nmoore () sourcefire com>
Date: Wed, 16 Nov 2011 08:34:37 -0600

Pawan,

Please see
http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml

Nick

On Mon, Nov 14, 2011 at 12:31 PM, Pawan Lal <pawan.lal () gmail com> wrote:

Hi I have configured Snort on Ubuntu 10.0.4 LTS. Snort is having to nic

eth1 - 10.5.0.172  Managment Port
eth0 - Snort Port   Snort Port

i have a 2960 Catalyst Switch in which

eth1 is connected to fa0/1
eth0 is connected to fa0/2

i have created a vlan 20 in which all ports are in vlan 20 except port
fa0/2.

plz guide me how to configure span port for fa0/2 so that snort should
show me all the traffic.

Thanks

------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest
Snort news!




-- 
Nick Moore, SFCE, CISSP, CISA
Sr. Systems Engineer
Voice 708-336-9041
Email nick.moore () sourcefire com
IM    nickgmoore (Yahoo)
       nickgmoore38 (AIM)

    ,,_
   o"  )~   Sourcefire - The Creators of Snort
    ''''

www.sourcefire.com         www.snort.org     www.immunet.com
------------------------------------------------------------------------------
RSA(R) Conference 2012
Save $700 by Nov 18
Register now
http://p.sf.net/sfu/rsa-sfdev2dev1
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Current thread: