[Snort-users] Question on snort redirecting

WAN FAT WU wuwanfat at ...8113...
Wed Feb 4 01:48:20 EST 2004


Hi All,
 
   Can snort redirect packet or traffic to other
 computer?

My case is:   
Attacker->linux box(with snort)----Internal(computer A
and B)
 
   Suppose an attacker is to attack my linux box. Can
 I forward the attacker's traffic to computer A in my
 Intarnet? At the same time, normal traffic to
 computer B?

   As you know, I don't know the attacker's IP before
it
 attack. How can I redirect it? Do I need to read
 from the snort database? Can snort know how to
redirect? or Do I need to write some scripts?
 
   Many Thanks!
 
 Best,
 Fred
 
 

_________________________________________________________
必殺技、飲歌、小星星...
浪漫鈴聲  情心連繫
http://ringtone.yahoo.com.hk/




More information about the Snort-users mailing list