[Snort-users] Snort in a switched environment

Bastian Ballmann ballmann at ...3190...
Tue May 14 08:17:03 EDT 2002

Is it possible to run Snort in a switched environment? Cause Snort can only 
sniff the traffic of the host he is running on. Unless he is doing something 
like ARP poisoning or something like this...
But I think this would lead into trouble if you run the arpspoof preprocessor 

Bastian Ballmann
Bastian Ballmann [ ballmann at ...3190... ]
@ Computational Design GmbH
[ http://www.co-de.de ]

More information about the Snort-users mailing list