Snort mailing list archives

Confused?


From: John Friedman <jfriedmanx () yahoo com>
Date: Tue, 1 Nov 2005 08:32:11 -0800 (PST)

Hi all,
 
Here is my home var HOME_NET [10.1.10.0/24]
I span the firewall port to the snort box monitoring port.  I got a lot of traffic from other VLAN such as 
10.1.14.0/24, 10.1.44.0/24...10.1.77.0/24...
 
I feel a liittle bit confused why some alerts from 10.1.14.0/24 and not just from 10.1.10.0/24?
 
Am I lost?
 
Thanks,
 
John

                
---------------------------------
 Yahoo! FareChase - Search multiple travel sites in one click.  

Current thread: