-
February 26th, 2003, 03:35 AM
#1
snort
How does snort work in a switched network? What are some good ways to set up snort on a network that uses multiple switches and has several subnets.
-
February 26th, 2003, 05:36 AM
#2
It doesn't really unfortunately...
Possibilities are pretty much limited to using port mirroring (SPAN ports), "splicing in" on an uplink/trunk with a hub...
Ammo
Credit travels up, blame travels down -- The Boss
-
February 26th, 2003, 05:24 PM
#3
hmm, then is there any good IDS software that will work in a switched enviornment?
-
February 26th, 2003, 05:35 PM
#4
Well, it's more a limitation of the concept of NIDS vs switching...
Only *true* solution is to have the IDS integrated to the switch, like on some cisco catalysts...
Ammo
Credit travels up, blame travels down -- The Boss
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|