[Snort-users] New guy.
Potts, Ross A.
RPOTTS at ...5660...
Mon Apr 7 12:25:08 EDT 2003
In the words of Mr. Garrison on South Park, "There are no stupid questions,
only stupid people".
Seriously, go ahead and ask away. People here will do their best to help
you excel. Sometimes, they'll just tell you where to look, which in the
long run, is best.
Look for Poppi Sandros' text on how to set up snort for different reports
(just look up his name). Lots of great stuff in there
From: L. Christopher Luther [mailto:CLuther at ...6333...]
Sent: Monday, April 07, 2003 2:21 PM
Cc: Snort-Users (E-mail)
Subject: RE: [Snort-users] New guy.
Your question is not stupid -- just FAQless. ;) Check out:
Or in general: http://www.snort.org/docs/faq.html
From: Mike [ mailto:nugget at ...8809... <mailto:nugget at ...8809...> ]
Sent: Monday, April 07, 2003 1:50 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] New guy.
Just signed up for this ML. Don't know about any rules or guide lines so
bear with me. Anyways, I'm pretty new to both Linux and Snort (keeping an
eye on HoneyD as well) and I guess my first question is kinda stupid:
If I would like to monitor the activity on a network with all computers on
the same subnet (the gateway is a firewall to the Internet). How would I set
up Snort? On what computer can I run it to be able to listen to all traffic?
I set up a test Snort but it would only see the traffic to the machine on
which I ran it.
"I had a linguistics professor who said that it's man's ability to use
language that makes him the dominant species on the planet. That may be. But
I think there's one other thing that separates us from animals -- We aren't
afraid of vacuum cleaners"
This SF.net email is sponsored by: ValueWeb:
Dedicated Hosting for just $79/mo with 500 GB of bandwidth!
No other company gives more support or power for your dedicated server
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Snort-users