[Snort-users] WAN and LAN interfaces

Josh Bitto jbitto at ...16055...
Tue Feb 12 12:21:19 EST 2013


I think I'm gonna have to go a different route on snort......

Pfsense with snort can monitor my WAN interface, but not my internal network....So I'm think I need to make a VM linux box and put it behind my firewall.....Does anyone else have a setup like this and could you give me some pointers on how to proceed?



From: Josh Bitto
Sent: Tuesday, February 12, 2013 8:38 AM
To: Josh Bitto; snort-users at lists.sourceforge.net
Subject: RE: WAN and LAN interfaces

Sorry my email sent off before I was ready....As I was saying....I think they only reason it isn't picking it up is because the way my network is setup is   Cloud-->Firewall(WAN-LAN) with snort-->internal...

Am I missing something or need to change a setting?




From: Josh Bitto [mailto:jbitto at ...16055...]
Sent: Tuesday, February 12, 2013 8:35 AM
To: snort-users at lists.sourceforge.net<mailto:snort-users at ...3783...net>
Subject: [Snort-users] WAN and LAN interfaces

I'm having issues with only being able to see traffic on my WAN interface and not my LAN interface. I'm using pfsense as my firewall and both interfaces connect to the internet fine. I've pass
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20130212/8d15995d/attachment.html>


More information about the Snort-users mailing list