[Snort-users] Preferrable location?
jlewis at ...2449...
Mon Nov 19 22:13:02 EST 2001
For a) I use this.
For b), one NIC could be used for packet capture and the other for
management (on an isolated subnet).
For c), You are venturing into the OS holy war. Go with what you know.
It's not secure "Because they told me it was secure".
The people at the other end of the link know less
about security than you do. And that's scary.
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net]On Behalf Of Ronneil
Sent: Monday, November 19, 2001 9:06 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Preferrable location?
I've got some questions.
a) Where would be the preferrable location of snort box on a network
with firewall (internal, dmz)? Do I need more than 1 snort?
b) What would be the advantage of having 2 nics on a snort box?
c) What o.s. is recommended for snort?
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 2392 bytes
Desc: not available
More information about the Snort-users