Mat,
You can place network taps between the gateway and switch in your
diagram. These taps have a monitor port that will connect to the
sensor, and in turn send a copy of all the traffic seen by the tap to
the sensor.
Scott Gould
Senior Network & Systems Analyst
Gynecologic Oncology Group
Statistical & Data Center
scott dot gould at gogstats dot org
________________________________
From: snort-users-bounces@lists.sourceforge.net
[mailto:snort-users-bounces@lists.sourceforge.net] On Behalf Of Rachmat
Hidayat Al-Anshar
Sent: Tuesday, December 18, 2007 11:10 PM
To: snort
Subject: [Snort-users] [ASK] Silent Interface??
Hi guys...
Straightforward, I just wanna know deeper about "silent interface" that
we might use on sensors.
I have a topology like this:
y
INTERNET ---- gateway ----- sensor
| | x
| |
+-------- switch --------- gateway -------
INTRANET
|
|
-------------
| | |
(servers on DMZ)
is it true that we can use the sensor interface silently monitoring the
traffic flowing accross the switch ?
(marked with x)??
if the answers is correct, then how can i do that??
is it with use the dhcp on in? or what??
Thanks in advance
Any response will greatly appreciated
Mat (^^)
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try
it now.
<http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i6
2sR8HDtDypao8Wcj9tAcJ>
-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
