Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort

Snort Forums Archive

Archive Home » Linux » snort placement

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

snort placement


Posted by malik on June 29, 2006 02:10:05

where should be snort placed in a web hosting encironments with 15 linux servers running apache with php,perl,frontpage, database mysql, dns.
This is switched environment and TAPS option is not possible.

Thanks

Posted by feelhype on July 06, 2006 00:52:49

on the switch before your webservers. you do Mirroring of port on your switch.