Snort mailing list archives

Re: VLAN inspection


From: "Al Lewis \(allewi\) via Snort-users" <snort-users () lists snort org>
Date: Wed, 15 Nov 2017 11:48:16 +0000

See the manual here: http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node25.html

Albert Lewis
ENGINEER.SOFTWARE ENGINEERING
SOURCEfire, Inc. now part of Cisco
Email: allewi () cisco com 








On 11/15/17, 6:45 AM, "Snort-users on behalf of Christoph Linse" <snort-users-bounces () lists snort org on behalf of 
christoph.linse () prodyna com> wrote:

Hey everybody,

i am new to snort and found no actual informations about the VLAN 
inspection.

I have on one Ethernet cable from Firewall to the Switch about 12 vlans 
and want to inspect each of them.

How does it works with the configuration? Do i have to set the HOME_NET 
and EXTERNAL_NET variables?

How is it with the vlan tags?

I hope someone can give me a hint or something that can help me about 
this topic!


Best regards

-- 
Christoph Linse
Dualer Student IT-Sicherheit


PRODYNA AG
Ludwig-Erhard-Straße 12-14
65760 Eschborn
 
Telefon +49 69 597724-0
Telefax +49 69 597724-700

 
christoph.linse () prodyna com
www.prodyna.com
 
Sitz: Frankfurt am Main
Amtsgericht: Frankfurt am Main HRB 81782
Geschäftsanschrift: Ludwig-Erhard-Straße 12-14, 65760 Eschborn
USt-ID: DE 122113119
Vorsitzender des Aufsichtsrates: Gregor Hansbuer
Vorstandsvorsitzender: Hüseyin Cifci

_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette
_______________________________________________
Snort-users mailing list
Snort-users () lists snort org
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Current thread: