[Snort-users] Preferrable location?

Jason Lewis jlewis at ...2449...
Mon Nov 19 22:13:02 EST 2001


For a) I use this.

http://www.packetnexus.com/docs/packetnexus/NIDS_Placement.pdf

For b), one NIC could be used for packet capture and the other for
management (on an isolated subnet).

For c), You are venturing into the OS holy war.  Go with what you know.

Jason Lewis
http://www.packetnexus.com
It's not secure "Because they told me it was secure".
The people at the other end of the link know less 
about security than you do. And that's scary.


-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Ronneil
Camara
Sent: Monday, November 19, 2001 9:06 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Preferrable location?


Hi,

I've got some questions.

a) Where would be the preferrable location of snort box on a network
with firewall (internal, dmz)? Do I need more than 1 snort?
b) What would be the advantage of having 2 nics on a snort box?
c) What o.s. is recommended for snort?

Thanks.

Neil

_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list
-------------- next part --------------
A non-text attachment was scrubbed...
Name: winmail.dat
Type: application/ms-tnef
Size: 2392 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20011119/cd35076c/attachment.bin>


More information about the Snort-users mailing list