[Snort-users] Snort in a switched environment
erek at ...577...
Tue May 14 11:32:03 EDT 2002
On Tue, 14 May 2002, Bastian Ballmann wrote:
> Is it possible to run Snort in a switched environment? Cause Snort can only
> sniff the traffic of the host he is running on. Unless he is doing something
> like ARP poisoning or something like this...
> But I think this would lead into trouble if you run the arpspoof preprocessor
More information about the Snort-users