-
June 11th, 2003, 07:04 PM
#1
Junior Member
Snort sensor location
I have had Snort running for some time now with the switch ports to my web and e-mail server mirrored to the port Snort is connected to. This seems to be working fine but I am now wondering if I should instead mirror the port that the router is connected to instead - I'd still be capturing the traffic to the web and mail servers - my fear is that I may be missing something.
Comments?
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|