[Snort-users] NIDS

Kevin Brown Kevin.M.Brown at ...1022...
Thu Jul 18 14:39:11 EDT 2002


To monitor the whole network it has to be in a position to see the whole
networks traffic.  If you are using cheap unmanaged switches it won't see
anything but traffic destined for it.  If in a Hubbed or managed switched
environment (higher end switches like Cisco stuff, etc...) then you need to
mirror/span/"whatever the term is" the traffic to the port snort is
listening on.

-----Original Message-----
From: Brandon Harms
To: Snort
Sent: 7/18/02 2:21 PM
Subject: [Snort-users] NIDS

I got snort set up and working, but I noticed that it only seems to
monitor
the traffic going to the machine that has snort installed on it. How do
I
get it to monitor the whole network? Thanks.

____________________________
Brandon Harms
South Dakota Library Network
brandonharms at ...6352...
(605) 642-6253



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020718/b6729e86/attachment.html>


More information about the Snort-users mailing list