[Snort-users] mirror port on dual interface running on snort

sateesh sateesh.kumar at ...12668...
Mon Nov 15 07:32:00 EST 2004


1) i have installed snort on dual interface server its working fine.

 2) i configured Mirror port on switch port (this port will collect all VLAN

        | =====  with ip address
snort server with 2 nic
         |====== switch SPAN port(with out ip add)

Right now i am getting snort alerts from only one subnet i.e If i configure snort on mirror port then i will get all
subnet info (Ex:,2.0,3.0 etc)

So, pls let me know How to configure a snort on this scenario


Sateesh Kumar.Kolagani


|Network Engineer| 24/7 Customer |<Office: +91-40-23122247  xtn
105>|<Mobile: +91-98493-69829>|<Fax:
+91-40-23122248>|mailto:sateesh.kumar at ...12668...|

|<247 Customer, Level 1, Block "B", Cyber Gateway, Madhapur,
Hyderabad-500081>| Website: www.247customer.com |
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20041115/d0abf19d/attachment.html>

More information about the Snort-users mailing list