[Snort-users] Snort in a switched environment

Erek Adams erek at ...577...
Tue May 14 11:32:03 EDT 2002


On Tue, 14 May 2002, Bastian Ballmann wrote:

> Is it possible to run Snort in a switched environment? Cause Snort can only
> sniff the traffic of the host he is running on. Unless he is doing something
> like ARP poisoning or something like this...
> But I think this would lead into trouble if you run the arpspoof preprocessor
> ;)

http://www.snort.org/docs/faq.html#1.8

Cheers!

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net





More information about the Snort-users mailing list