[Snort-users] Snort Topology Configuration

DThomaz at ...6151... DThomaz at ...6151...
Mon Jun 24 12:16:03 EDT 2002


I have setup snort on my local LAN. The snort box is collecting only from
my LAN.
I want to sniff all packages that came from my WAN in to the LAN using
snort.
My question is that if I span the Ethernet port of my WAN router to the
sniffer port should collect all  WAN data coming in the LAN?
Here is my network:

     ethernetport<router>WAN--------------CLOUD
            |
            |
     switch CAT4k
            |
            |
     Snort box

Do I need any special configuration on the snort box to use the span
command from the switch?

Thanks for the support,

dthomaz







More information about the Snort-users mailing list