snort
Results 1 to 4 of 4

Thread: snort

  1. #1
    Senior Member linuxcomando's Avatar
    Join Date
    Sep 2001
    Posts
    430

    snort

    How does snort work in a switched network? What are some good ways to set up snort on a network that uses multiple switches and has several subnets.

  2. #2
    Senior Member
    Join Date
    Sep 2001
    Posts
    1,027
    It doesn't really unfortunately...

    Possibilities are pretty much limited to using port mirroring (SPAN ports), "splicing in" on an uplink/trunk with a hub...

    Ammo
    Credit travels up, blame travels down -- The Boss

  3. #3
    Senior Member linuxcomando's Avatar
    Join Date
    Sep 2001
    Posts
    430
    hmm, then is there any good IDS software that will work in a switched enviornment?

  4. #4
    Senior Member
    Join Date
    Sep 2001
    Posts
    1,027
    Well, it's more a limitation of the concept of NIDS vs switching...
    Only *true* solution is to have the IDS integrated to the switch, like on some cisco catalysts...

    Ammo
    Credit travels up, blame travels down -- The Boss

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •