[Snort-users] Snort in a switched environment

Erek Adams erek at ...577...
Tue May 14 11:32:03 EDT 2002

On Tue, 14 May 2002, Bastian Ballmann wrote:

> Is it possible to run Snort in a switched environment? Cause Snort can only
> sniff the traffic of the host he is running on. Unless he is doing something
> like ARP poisoning or something like this...
> But I think this would lead into trouble if you run the arpspoof preprocessor
> ;)



Erek Adams

More information about the Snort-users mailing list