[Snort-users] VLAN inspection

Al Lewis (allewi) allewi at cisco.com
Wed Nov 15 06:48:16 EST 2017


See the manual here: http://manual-snort-org.s3-website-us-east-1.amazonaws.com/node25.html

Albert Lewis
ENGINEER.SOFTWARE ENGINEERING
SOURCEfire, Inc. now part of Cisco
Email: allewi at cisco.com 








On 11/15/17, 6:45 AM, "Snort-users on behalf of Christoph Linse" <snort-users-bounces at lists.snort.org on behalf of christoph.linse at prodyna.com> wrote:

>Hey everybody,
>
>i am new to snort and found no actual informations about the VLAN 
>inspection.
>
>I have on one Ethernet cable from Firewall to the Switch about 12 vlans 
>and want to inspect each of them.
>
>How does it works with the configuration? Do i have to set the HOME_NET 
>and EXTERNAL_NET variables?
>
>How is it with the vlan tags?
>
>I hope someone can give me a hint or something that can help me about 
>this topic!
>
>
>Best regards
>
>-- 
>Christoph Linse
>Dualer Student IT-Sicherheit
>
>
>PRODYNA AG
>Ludwig-Erhard-Straße 12-14
>65760 Eschborn
>  
>Telefon +49 69 597724-0
>Telefax +49 69 597724-700
>
>  
>christoph.linse at prodyna.com
>www.prodyna.com
>  
>Sitz: Frankfurt am Main
>Amtsgericht: Frankfurt am Main HRB 81782
>Geschäftsanschrift: Ludwig-Erhard-Straße 12-14, 65760 Eschborn
>USt-ID: DE 122113119
>Vorsitzender des Aufsichtsrates: Gregor Hansbuer
>Vorstandsvorsitzender: Hüseyin Cifci
>
>_______________________________________________
>Snort-users mailing list
>Snort-users at lists.snort.org
>Go to this URL to change user options or unsubscribe:
>https://lists.snort.org/mailman/listinfo/snort-users
>
>Please visit http://blog.snort.org to stay current on all the latest Snort news!
>
>Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette


More information about the Snort-users mailing list