Snort mailing list archives
RE: Attack on snort running in Public Zone
From: "Geoff Craig" <GCraig () quilogy com>
Date: Fri, 14 Nov 2003 21:52:15 -0600
Hello, When running Snort on a Windows 2000 machine one thing you should always do is unbind EVERYTHING from the interface that Snort is running on. This is the equivalent of running Snort in stealth mode. Snort will still be able to view and log the traffic. You will need to either view all of the log data locally or use a second interface hopefully on a completely VLAN'd subnet to send data to a centralized point or for remote viewing of logs with ACID, etc. Hope that helps, Geoff Craig Infrastructure Architect/Engineer Quilogy - The Art & Science of Business Atomic Security: Security for the real world ------------------------------------------------------- This SF. Net email is sponsored by: GoToMyPC GoToMyPC is the fast, easy and secure way to access your computer from any Web browser or wireless device. Click here to Try it Free! https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- RE: RE: Attack on snort running in Public Zone, (continued)
- RE: RE: Attack on snort running in Public Zone james (Nov 16)
- RE: RE: Attack on snort running in Public Zone james (Nov 17)
- RE: RE: Attack on snort running in Public Zone Michael Steele (Nov 14)
- Re: Attack on snort running in Public Zone MH (Nov 14)
- Re: Attack on snort running in Public Zone crtech (Nov 18)
- RE: Attack on snort running in Public Zone Lucretia Enterprises Administrator (Nov 18)
- RE: Attack on snort running in Public Zone Michael Steele (Nov 18)
- AG M.D. DeWar (Nov 18)
- Re: AG GDHough (Nov 18)
- Re: Attack on snort running in Public Zone Matt Kettler (Nov 18)
- RE: Attack on snort running in Public Zone Lucretia Enterprises Administrator (Nov 18)
- RE: Attack on snort running in Public Zone Geoff Craig (Nov 14)
- RE: Attack on snort running in Public Zone Aaron (Nov 17)
- RE: Attack on snort running in Public Zone bmcdowell (Nov 18)
- Message not available
- RE: Attack on snort running in Public Zone Matt Kettler (Nov 18)
- RE: Attack on snort running in Public Zone Lucretia Enterprises Administrator (Nov 18)
- RE: Attack on snort running in Public Zone Matt Kettler (Nov 19)
- RE: Attack on snort running in Public Zone Jason Haar (Nov 18)
- Re: Attack on snort running in Public Zone Craig Paterson (Nov 18)
- Attack on snort running in Public Zone crtech (Nov 20)
- Message not available