[Snort-users] Linux Bridge and Snort

Paul Cook pkcook at ...7007...
Fri Sep 27 15:26:06 EDT 2002


Suggestions please.

Set-up:  

bridging eth0 and eth1 to bridge1
eth0 0.0.0.0
eth1 0.0.0.0
bridge1 0.0.0.0

Interested in monitoring traffic to 192.168.15.14.  Traffic is being
forwarded appropriately thus the bridge is connected appropriately.  

Which interface should snort monitor?

What would be appropriate for the following?
HOME_NET = ?
EXTERNAL_NET = ?

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20020927/1c6f1eff/attachment.html>


More information about the Snort-users mailing list