how to span traffic to snort

[Marcio Guerreiro <marcio.guerreiro () hotmail co uk>]

Hi everyone 

 

I think I am not far to make this work.. but I am stuck.

 

I have three interfaces in my snort and I need to Span the traffic to snort
(my snort is not configured as INLINE ) does anybody knows how to span the
traffic to SNORT ? I am asking because my snort it's capturing the packets
that are broadcasted only. I want to be able to see all traffic in my
network. 

 

 

My networks cards are configured as follow:

 

Eth0 - management interface

Eth1 - configured as promiscuous

Eth2 - configured as promiscuous

 

 



 



 

 

 

 

Thank you in advance.

 

Marcio

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!