Fwd: Passive Snort Setup

[Daniel Hood <dsmhood () gmail com>]

I think the Hogwash or snort_inline ideas look the best.

I want to manage it completely via BASE cause I am lazy and dont like
monitoring it any other way. If I used this same topology where would
I set up the webserver (which interface? and i know it would need an
ip) to run BASE? and would hogwash or snort_inline work? or would I
need a 3rd interface used for management?

Thanks,
Daniel