[Snort-users] snort deployment

Patrick Harper patrick at ...4250...
Mon Aug 29 18:59:17 EDT 2005


I would set up a span port personally, most modern switch's will do it, even
my cheapo gig managed switched from Dell. Other wise I guess you could do a
bridge but I would suggest you get a hub or a cheap managed switch.  That is
just my personal opinion.



Patrick S. Harper | CISSP RHCT MCSE
www.internetsecurityguru.com

Just because your paranoid, doesn't mean they're not out to get you 




 
-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of fname lname
Sent: Monday, August 29, 2005 8:22 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] snort deployment

Im building a linux box with to nics  I want to put this box between my pix
and switch. So I can for the IDS on all that traffic coming in and out of
our lan.  I wanted to know should I setup this up in a bridge mode because I
dont have a tap.

Thanks adv.







More information about the Snort-users mailing list