[Snort-users] VLAN inspection

Al Lewis (allewi) allewi at cisco.com
Wed Nov 15 06:48:16 EST 2017

See the manual here: http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node25.html

Albert Lewis
SOURCEfire, Inc. now part of Cisco
Email: allewi at cisco.com 

On 11/15/17, 6:45 AM, "Snort-users on behalf of Christoph Linse" <snort-users-bounces at lists.snort.org on behalf of christoph.linse at prodyna.com> wrote:

>Hey everybody,
>i am new to snort and found no actual informations about the VLAN 
>I have on one Ethernet cable from Firewall to the Switch about 12 vlans 
>and want to inspect each of them.
>How does it works with the configuration? Do i have to set the HOME_NET 
>and EXTERNAL_NET variables?
>How is it with the vlan tags?
>I hope someone can give me a hint or something that can help me about 
>this topic!
>Best regards
>Christoph Linse
>Dualer Student IT-Sicherheit
>Ludwig-Erhard-Straße 12-14
>65760 Eschborn
>Telefon +49 69 597724-0
>Telefax +49 69 597724-700
>christoph.linse at prodyna.com
>Sitz: Frankfurt am Main
>Amtsgericht: Frankfurt am Main HRB 81782
>Geschäftsanschrift: Ludwig-Erhard-Straße 12-14, 65760 Eschborn
>USt-ID: DE 122113119
>Vorsitzender des Aufsichtsrates: Gregor Hansbuer
>Vorstandsvorsitzender: Hüseyin Cifci
>Snort-users mailing list
>Snort-users at lists.snort.org
>Go to this URL to change user options or unsubscribe:
>Please visit http://blog.snort.org to stay current on all the latest Snort news!
>Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

More information about the Snort-users mailing list