Results 1 to 3 of 3

Thread: Another Snort Question

  1. March 5th, 2003, 04:08 AM #1
    linuxcomando
    linuxcomando is offline
    Senior Member linuxcomando's Avatar
    Join Date
    Sep 2001
    Posts
    432

    Another Snort Question

    If you have 5 switches on a network how would set up snort on the network? Do you need to put 5 different sensors on each of the spanning ports? or is their a way to set up snort on each of the spaning ports?
    Reply With Quote Reply With Quote
  2. March 5th, 2003, 08:41 AM #2
    jdenny
    jdenny is offline
    Senior Member
    Join Date
    Jul 2002
    Posts
    339
    http://www.mcabee.org/lists/snort-us.../msg00262.html
    http://www.shmoo.com/mail/ids/oct99/msg00567.html

    Hope this helps.

    Peace always,
    <jdenny>
    Always listen to experts. They\'ll tell you what can\'t be done and why. Then go and do it. -- Robert Heinlein
    I\'m basically a very lazy person who likes to get credit for things other people actually do. -- Linus Torvalds

    Reply With Quote Reply With Quote
  3. March 6th, 2003, 11:13 PM #3
    tampabay420
    tampabay420 is offline
    Senior Member tampabay420's Avatar
    Join Date
    Aug 2002
    Posts
    953
    ISS Security Advisory - Snort v1.8 through 1.9.0 contains a remote root vulnerability in the processing of fragmented RPC traffic. Since fragment sizes are not properly checked against the remaining buffer space, remote attackers can execute arbitrary code as root by sending a packet to any IP in network space a snort sensor is listening to. Successful exploitation does not generate log entries, and non-executable stacks do not offer protection. Homepage: http://xforce.iss.net.
    yeah, I\'m gonna need that by friday...
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules