Best way to deploy snort

[Kum Weng Luey <kumwengluey () gmail com>]

Hi all,

I was wondering what would be the optimal setting to deploy snort with base
and barnyard. I am thinking of separating the mysql database from snort
itself and place it on a remote server. I am wondering do I need to have an
additional interface for snort ? One interface for sniffing and the other to
push alerts to the mysql server.

One last question: Would snort be better off being placed in the DMZ to
sniff incoming traffic or within the internal LAN between the router and the
firewall.

I am still rather new with this and any help would be greatly appreciated.

Regards,
KW

------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users