Snort mailing list archives
RE: Help with a config file please?
From: snort () xiata com
Date: Tue, 8 Apr 2003 20:14:56 -0500 (EST)
Better late than never I say! Here is the post-mortem on this thread. Do not use LinkSys Hubs to listen on a network. The simple answer is that the moment that I went from using a LinkSys hub (Yes I made sure that it was a Hub & not a switch) to using a monitor session on a Cisco switch my snort device started to report all sorts of alarms. So lesson learned just because it says Hub it does not mean that all the ports will see all the traffic even though technologically that is what you would expect. Thanks to all for your help. Carlos ------------------------------------------------------- This SF.net email is sponsored by: ValueWeb: Dedicated Hosting for just $79/mo with 500 GB of bandwidth! No other company gives more support or power for your dedicated server http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/ _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Help with a config file please? snort (Apr 03)
- <Possible follow-ups>
- RE: Help with a config file please? L. Christopher Luther (Apr 04)
- RE: Help with a config file please? snort (Apr 04)
- RE: Help with a config file please? L. Christopher Luther (Apr 04)
- RE: Help with a config file please? snort (Apr 04)
- RE: Help with a config file please? L. Christopher Luther (Apr 04)
- RE: Help with a config file please? snort (Apr 04)
- RE: Help with a config file please? snort (Apr 04)
- RE: Help with a config file please? snort (Apr 04)
- RE: Help with a config file please? L. Christopher Luther (Apr 04)
- RE: Help with a config file please? snort (Apr 08)