[Snort-users] NIDS

Kevin Brown Kevin.M.Brown at ...1022...
Thu Jul 18 14:39:11 EDT 2002

To monitor the whole network it has to be in a position to see the whole
networks traffic.  If you are using cheap unmanaged switches it won't see
anything but traffic destined for it.  If in a Hubbed or managed switched
environment (higher end switches like Cisco stuff, etc...) then you need to
mirror/span/"whatever the term is" the traffic to the port snort is
listening on.

-----Original Message-----
From: Brandon Harms
To: Snort
Sent: 7/18/02 2:21 PM
Subject: [Snort-users] NIDS

I got snort set up and working, but I noticed that it only seems to
the traffic going to the machine that has snort installed on it. How do
get it to monitor the whole network? Thanks.

Brandon Harms
South Dakota Library Network
brandonharms at ...6352...
(605) 642-6253

This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020718/b6729e86/attachment.html>

More information about the Snort-users mailing list