[Snort-users] Bonding or bridging two subnets

welz at ...13668... welz at ...13668...
Wed Dec 28 03:52:04 EST 2005

I do my first steps with snort. I want to run snort on a router+firewall
(SuSE Linux 10) to observe the traffic of my internal network and my DMZ.
Internet is not considered beeing observed.

I have three nics: (==a) (==b)
internet.ip.nnn.nnn (not to be considered)

So snort shall observe the traffic on a) and b).

Shall I bond the two nics together to a virtual interface? Or shall I
simply bridging here?

Thanks for help,

More information about the Snort-users mailing list