Snort.org home  
Got Source? About Snort About Sourcefire Snort FAQ
Sourcefire Network Security - the creators of Snort
Snort News Downloads Snort Docs Rules Snort Community Snort Forums Snort Training
Search Site
Search Rules
Account
email
password
not registered?
user preferences

Snort Forums Archive

Archive Home » BSD » Best Way to Trap Traffic

Please note that the categories listed below represent an archived version of our forums pages. To view the current version and be able to post and reply to threads, please register and login here to go to the full forums pages.

[ Notice: Full Version of This Topic ]

Best Way to Trap Traffic


Posted by 4to6 on November 24, 2005 14:53:24

I am using FreeBSD 6.0 with Snort as an IDS. I am trying to figure out the best way to catch traffic. Is it possible to use 2 NICS in bridging mode (Inline) or to span the WAN connection port on the switch?

Posted by macthk on January 30, 2006 19:32:56

I use on nic intenal secured mgmt interface and the other on switch span port.

site feedback | Terms of Use | Privacy Policy | forum archives ©2007 Snort and Sourcefire are registered trademarks of Sourcefire, Inc. All rights reserved.