[Snort-users] ideal setup

Kevin Brown Kevin.M.Brown at ...1022...
Thu Aug 8 08:17:04 EDT 2002


Only if you're worried what people are doing inside your network to each
other.  For a home network I don't think you need to worry too much about
mom and dad hacking your box (at least I don't).

-----Original Message-----
From: Keith Young [mailto:kyoung at ...6513...]
Sent: Wednesday, August 07, 2002 4:46 PM
To: Kevin Brown
Cc: snort-users at lists.sourceforge.net
Subject: Re: [Snort-users] ideal setup


Kevin Brown wrote:
> Then (if snort doesn't have this already) maybe snort should be used in 
> non-promiscuous mode if it is run from the firewall because all the 
> traffic destined for your network has to go through the firewall.
> 

Good point.

However you will still need to run another copy of Snort for your inside 
network (for traffic that doesn't go through the firewall), right?

FYI, Snort does support non-promiscuous mode with the "-p" switch.

-- 

-- 
--Keith Young
-kyoung at ...6513...

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020808/55eba324/attachment.html>


More information about the Snort-users mailing list