[Snort-users] Snort DUAL nics

Steve Pruchniewski Steve.Pruchniewski at ...1470...
Tue Apr 10 08:29:05 EDT 2001


Here is one interesting link on how to make a stealth cable:

http://www.robertgraham.com/pubs/sniffing-faq.html check out section 3.6 .

That said, I have not managed to make this work.

Steve Pruchniewski

-----Original Message-----
From: shawn . moyer [mailto:shawn at ...1184...]
Sent: Wednesday, April 04, 2001 6:51 PM
To: Ryan Russell
Cc: Erik Fichtner; Joe Wright; Snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] Snort DUAL nics


Ryan Russell wrote:

> Any idea if the box will respond to broadcast or multicast IP with that
> configuration?

It shouldn't but to be on the safe side you might think about making a
stealth cable (transmit leads cut). This should get you started:

http://stason.org/TULARC/pc/networking_cabling.html

http://support.intel.com/support/etherexpress/vintage/6202.htm






--shawn

-- 

s h a w n   m o y e r
shawn at ...1184...

"Nuclear war would really set back cable."
	                     -- Ted Turner

_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list