[Snort-users] snort setup

Tom Sevy tsevy at ...1701...
Fri Jul 12 07:32:04 EDT 2002


I would recommend instead that you put a decent hub in rather than put the
snort box inline.  What happens when you have to reboot the snort server
box?  You (& your users & your web visitors) will lose the internet
connection.

So go with:

Cisco Router ---------------------HUB------------------Switch
                                   |
                                   |
                                   |
                              Snort Sensor



-----Original Message-----
From: Alwin Raymundo [mailto:alrayworld at ...131...]
Sent: Friday, July 12, 2002 7:36 AM
To: user snort
Subject: [Snort-users] snort setup


Hi all,

Here is my another naive question.  I want to put my
snort box in front of my switch because my swith is
not capable of port mirroring.

internet -> cisco router -> snort box -> switch ->
servers

My future setup on snort box (redhat 7.3, snort -mysql
and 2 nic cards).

here now the question about the 2 nic what should I
used ip address to these 2 nic cards, should it be 2
public ip address? or 1 public IP address and 1
network address.

any help would be highly appreciated.

Thanks in advance, brother in snort.


=====
Alwin Raymundo

__________________________________________________
Do You Yahoo!?
Sign up for SBC Yahoo! Dial - First Month Free
http://sbc.yahoo.com


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Gadgets, caffeine, t-shirts, fun stuff.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users




More information about the Snort-users mailing list