Snort mailing list archives
Snort and topology
From: Emmanuel Lesouef <e.lesouef () crbn fr>
Date: Wed, 8 Apr 2009 11:42:16 +0200
Hi, I'm currently planning to deploy snort (which I already did on one server) but I would like to build sort of a network of nids. I'm explaining. We use several vlans and geographically different site. I don't know exactly how to make my snort network be the best as I could considering this topology : Site1 <-> Primary Site <-> Site 2 I was thinking about having snort on each site but the primary one be considered as the "monitoring" one, as if it was aggregating data collected and analysed on distant sites. Can someone give some advice about this sort of deployment ? Is it possible to configure a network of nids ? Thanks for all the infos you can give. -- Emmanuel Lesouef ------------------------------------------------------------------------------ This SF.net email is sponsored by: High Quality Requirements in a Collaborative Environment. Download a free trial of Rational Requirements Composer Now! http://p.sf.net/sfu/www-ibm-com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Snort and topology Emmanuel Lesouef (Apr 08)
- Re: Snort and topology Joel Esler (Apr 08)
- Re: Snort and topology Emmanuel Lesouef (Apr 08)
- Re: Snort and topology Joel Esler (Apr 08)
- Re: Snort and topology Emmanuel Lesouef (Apr 08)
- Re: Snort and topology Joel Esler (Apr 08)