[Snort-users] Snort in a switched environment
ballmann at ...3190...
Tue May 14 08:17:03 EDT 2002
Is it possible to run Snort in a switched environment? Cause Snort can only
sniff the traffic of the host he is running on. Unless he is doing something
like ARP poisoning or something like this...
But I think this would lead into trouble if you run the arpspoof preprocessor
Bastian Ballmann [ ballmann at ...3190... ]
@ Computational Design GmbH
[ http://www.co-de.de ]
More information about the Snort-users