[Snort-users] Snort and acidcenter
Rigoberto De la Portilla
rdelaportilla at ...131...
Wed Jan 1 08:23:03 EST 2003
i have a netgear dualspead 10/100 hub...
are you telling me this wont work ?
i am now going to setup kind of the same thing as joe,
just that i have dsl with a block of ips on the same
my dsl modem connected to netgear dualspeed hub.
connected to the dualspeed there is one snortbox in
one honeypot with a static
one ethernet router with a static
eth0 for snort box is on the local lan behind the
has anyone found a good setup howto for
rh8/snort/mysql??? i read the 7.3 even thought that i
used the snort-mysql.x.rpm i ran into some issues
where my acid console was not picking up any traffic
or the sensor.
all access to the mysql was setup following the steps
of the howto also permissions to directorys were
From: "Paul D. Shaffer" <paulshaf at ...741...>
To: "'Joseph Turley'" <syprinth at ...131...>,
<snort-users at lists.sourceforge.net>
Subject: RE: [Snort-users] Snort and acidcenter
Date: Tue, 31 Dec 2002 15:56:06 -0700
As long as the hub is truly a "hub" and not one of
types that actually "switches" between the 10/100
fabric, you only need
to snort on one interface. You will however have to
HOME_NET variable to cover the address space you're
You can run ACID from anywhere as long as you setup
access to/from the
database and from the sensor box, if they are not all
three one and the
same. If your hardware is recent and has the
there's no reason you can't run everything on one box.
For a home net,
even older hardware would probably be sufficient to
Hope that helps...
Rigoberto De La Portilla -=[MCSE, WCSP]=-
Do you Yahoo!?
Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
More information about the Snort-users