[Snort-users] Bonding or bridging two subnets

R. Welz welz at ...13668...
Wed Dec 28 03:59:00 EST 2005


Hello.
I do my first steps with snort. I want to run snort on a router+firewall
(SuSE Linux 10) to observe the traffic of my internal network and my DMZ.
Internet is not considered beeing observed.

I have three nics: 192.168.11.1 (==a)
192.168.12.1 (==b)
internet.ip.nnn.nnn (not to be considered)

So snort shall observe the traffic on a) and b).

Shall I bond the two nics together to a virtual interface? Or shall I
simply bridging here?

Thanks for help,
Robert





More information about the Snort-users mailing list