[Snort-users] As a newbie, two questions

Emanuele Salvador lele at ...5772...
Fri May 3 09:01:05 EDT 2002


On Venerdì, maggio 3, 2002, at 05:32 , McCammon, Keith wrote:

> 2) your sensor is properly placed on a monitoring port on your switch,


What exactly should I check? I think the var $HOME_NET, set to any, is 
right. And I'm testing the machines on a hub, not a switch since I read 
that there may arise problems (and i still have to read manuals to see if 
my switch supports mirroring).

Thanks,
Emanuele






More information about the Snort-users mailing list