Snort mailing list archives
Can Snort monitor multiple VLANs?
From: "Escudero, Peter Louis" <peterlouis.escudero () eds com>
Date: Tue, 5 Apr 2005 11:53:36 -0400
Our IDS box is a Dell PE750 running SuSE Linux 9.1 Pro & snort v2.1.x, with a quad 10/100 NIC card. Three of the ports are hooked up to 3 different Cisco switches, representing 3 different VLANs. We're able to capture alerts from one switch, but not from the others. Is snort able to monitor different VLANs? Or do we need a separate IDS box for each VLAN? Any info you can provide will be greatly appreciated. Peter Escudero
Current thread:
- Can Snort monitor multiple VLANs? Escudero, Peter Louis (Apr 05)
- <Possible follow-ups>
- RE: Can Snort monitor multiple VLANs? Peter Barton (Apr 05)
- Running multiple Barnyards (was Re: Can Snort monitor multiple VLANs?) Andrew R. Baker (Apr 06)
- RE: Can Snort monitor multiple VLANs? Escudero, Peter Louis (Apr 05)
- RE: Can Snort monitor multiple VLANs? Basselgia, Barry A Mr (NAF Atsugi) (Apr 05)