[Snort-users] How to place Snort machine on the network ?
szilagyi at ...3673...
Wed Jan 9 02:15:01 EST 2002
> If you send the config of your switch (decorated of course Interface
> Ethernet0/0 ip xxx.xxx.xxx.xxx ) maybe I can give you some assistance with
> the span port.
> Best Regards
> Gergely Szilagyi
> gergely at ...3671...
> ----- Original Message -----
> From: "Syed Tariq Mustafa" <Mustafast at ...4492...>
> To: <snort-users at lists.sourceforge.net>
> Sent: Tuesday, January 08, 2002 12:49 PM
> Subject: [Snort-users] How to place Snort machine on the network ?
> > Hi All,
> > I am new to the Snort stuff. But I have managed to install and test it.
> > working fine as far as running it is concerned. I set the eth0 LAN
> > connection to PROMISCIUS mode, which is then supposed to capture all
> > traffic.
> > But it is not happening so if you use " snort -v " to display the
> > your screen.
> > All I could see is the broadcast traffic. Say a packet from 192.168.0.10
> > 192.168.0.255 but machine to machine communication isn't just appearing
> > I am connected to the network using a Cisco 2912 switch and have set one
> > its port to Monitoring Port. Now I am not sure if it is properly set as
> > monitoring port or not ... !!!
> > Can someone tell me what is the cause of this problem.
> > Thanks
> > Trek
More information about the Snort-users