[Snort-users] mirror port on dual interface running on snort

sateesh sateesh.kumar at ...12668...
Mon Nov 15 07:32:00 EST 2004


Hi

1) i have installed snort on dual interface server its working fine.

 2) i configured Mirror port on switch port (this port will collect all VLAN
info)

        | =====  with ip address 192.168.1.20
snort server with 2 nic
         |====== switch SPAN port(with out ip add)

Right now i am getting snort alerts from only one subnet i.e
192.168.1.0..... If i configure snort on mirror port then i will get all
subnet info (Ex:192.168.1.0,2.0,3.0 etc)

So, pls let me know How to configure a snort on this scenario


Regards,



Sateesh Kumar.Kolagani


----------------------------------------------------------------------------
----

|Network Engineer| 24/7 Customer |<Office: +91-40-23122247  xtn
105>|<Mobile: +91-98493-69829>|<Fax:
+91-40-23122248>|mailto:sateesh.kumar at ...12668...|

|<247 Customer, Level 1, Block "B", Cyber Gateway, Madhapur,
Hyderabad-500081>| Website: www.247customer.com |
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041115/d0abf19d/attachment.html>


More information about the Snort-users mailing list