[Snort-users] how to configure dual-nic-setup-using-portscan

Nick Moore nmoore at ...1935...
Wed Nov 16 09:34:37 EST 2011


Pawan,

Please see
http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml

Nick

On Mon, Nov 14, 2011 at 12:31 PM, Pawan Lal <pawan.lal at ...11827...> wrote:

> Hi I have configured Snort on Ubuntu 10.0.4 LTS. Snort is having to nic
>
> eth1 - 10.5.0.172  Managment Port
> eth0 - Snort Port   Snort Port
>
> i have a 2960 Catalyst Switch in which
>
> eth1 is connected to fa0/1
> eth0 is connected to fa0/2
>
> i have created a vlan 20 in which all ports are in vlan 20 except port
> fa0/2.
>
> plz guide me how to configure span port for fa0/2 so that snort should
> show me all the traffic.
>
> Thanks
>
> ------------------------------------------------------------------------------
> RSA(R) Conference 2012
> Save $700 by Nov 18
> Register now
> http://p.sf.net/sfu/rsa-sfdev2dev1
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>



-- 
Nick Moore, SFCE, CISSP, CISA
Sr. Systems Engineer
Voice 708-336-9041
Email nick.moore at ...1935...
IM    nickgmoore (Yahoo)
       nickgmoore38 (AIM)

    ,,_
   o"  )~   Sourcefire - The Creators of Snort
    ''''

www.sourcefire.com         www.snort.org     www.immunet.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20111116/a322da4f/attachment.html>


More information about the Snort-users mailing list