[Snort-users] Bonding or bridging two subnets
welz at ...13668...
Wed Dec 28 03:59:00 EST 2005
I do my first steps with snort. I want to run snort on a router+firewall
(SuSE Linux 10) to observe the traffic of my internal network and my DMZ.
Internet is not considered beeing observed.
I have three nics: 192.168.11.1 (==a)
internet.ip.nnn.nnn (not to be considered)
So snort shall observe the traffic on a) and b).
Shall I bond the two nics together to a virtual interface? Or shall I
simply bridging here?
Thanks for help,
More information about the Snort-users