[Snort-users] Place to install Snort
JohnH at ...2355...
Sat Jan 24 13:21:24 EST 2015
One method is to place a hub (not switch) between the LAN cable of your router and the LAN connection to the switch. Or if you have a monitoring port configured on your switch, then you can use that.
Internet => Router => HUB (not switch) =>regular switch (and connect Snort to the hub where it will get all traffic passed behind the firewall)
Internet => Router => Switch with monitoring port configured (and connect Snort to the monitoring port)
More information about the Snort-users