March 5th, 2003, 03:08 AM
Another Snort Question
If you have 5 switches on a network how would set up snort on the network? Do you need to put 5 different sensors on each of the spanning ports? or is their a way to set up snort on each of the spaning ports?
March 5th, 2003, 07:41 AM
Always listen to experts. They\'ll tell you what can\'t be done and why. Then go and do it. -- Robert Heinlein
I\'m basically a very lazy person who likes to get credit for things other people actually do. -- Linus Torvalds
March 6th, 2003, 10:13 PM
ISS Security Advisory - Snort v1.8 through 1.9.0 contains a remote root vulnerability in the processing of fragmented RPC traffic. Since fragment sizes are not properly checked against the remaining buffer space, remote attackers can execute arbitrary code as root by sending a packet to any IP in network space a snort sensor is listening to. Successful exploitation does not generate log entries, and non-executable stacks do not offer protection. Homepage: http://xforce.iss.net.
yeah, I\'m gonna need that by friday...