Keith.McCammon at ...3497...
Thu Jul 18 14:39:02 EDT 2002
In a nutshell: You have to set your HOME_NET variable correctly, the interface must be in promiscuous mode (this is default unless you turn it off), and you must have the sensor placed correctly within your network topology.
As far as placing your sensor correctly is concerned, that's for you to know. You know your network and your hardware, which are the relevant variables. Find a point where you can see what you want to see, and configure what you need to configure (hardware, VLAN, etc.) to achieve the desired result.
> -----Original Message-----
> From: Brandon Harms [mailto:brandonharms at ...6352...]
> Sent: Thursday, July 18, 2002 5:21 PM
> To: Snort
> Subject: [Snort-users] NIDS
> I got snort set up and working, but I noticed that it only
> seems to monitor
> the traffic going to the machine that has snort installed on
> it. How do I
> get it to monitor the whole network? Thanks.
> Brandon Harms
> South Dakota Library Network
> brandonharms at ...6352...
> (605) 642-6253
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users