[Snort-users] HOME_NET and EXTERNAL_NET question

Kresna Prawira kprawira at ...3243...
Fri Feb 8 15:46:02 EST 2002


If I want to monitor traffic originated both from inside network and
external network, what  is the best way to do that?  The reason for this is
to monitor if any of my internal users try to hack somebody outside. 

right now I put "any" on HOME_NET and EXTERNAL_NET


thanks.




More information about the Snort-users mailing list