Re: Multiple network segment monitor with Snort

From: Sergio Pozo Hidalgo (blitter_es_at_yahoo.es)
Date: 10/01/03

  • Next message: Greg Taleck: "[ANNOUNCE] ip6sic 0.1" 
    Date: Wed, 01 Oct 2003 21:40:29 +0200
To: focus-ids@securityfocus.com

    Forrest, Reid wrote:

    > Yes you can. We've deployed sensors with up to 12 NICs running independent
    > snort processes. CPU utilization is surprisingly low. You can also use
    > separate snort.conf files for each NIC so you can tweak the alerts for
    > different networks (i.e. inside vs. outside).

    Which hardware did you use to install 12 NICs?

    Cheers

    ---------------------------------------------------------------------------
    Captus Networks IPS 4000
    Intrusion Prevention and Traffic Shaping Technology to:
     - Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
     - Automatically Control P2P, IM and Spam Traffic
     - Precisely Define and Implement Network Security & Performance Policies
    FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo
    http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
    ---------------------------------------------------------------------------

  • Next message: Greg Taleck: "[ANNOUNCE] ip6sic 0.1"

    Relevant Pages

    • Re: Lan setup 2 nic
      ... It seems like I still have to create new clients for all the client ... What 2 available TCP/IP ... > Attached a screenshots of my 2 nics. ... Above that is the Clients for Networks ...
      (microsoft.public.windows.server.sbs)
    • Re: Two NICs in one machine and same LAN?
      ... Because they are different networks, ... If both NICs are on the same subnet, they should be teamed and would only ... not both will be disabled due to a NetBIOS name conflict. ... Suppose a query is sent to DNS for this machine and DNS gives the 10.1.1.1 ...
      (microsoft.public.win2000.dns)
    • RE: Multiple NICs in a Server 2003 Box
      ... When a computer is multihomed with NICs attached to disjoint networks ... Avoid configuring a different default gateway on each side; ... result in unpredictable behavior and loss of connectivity. ...
      (microsoft.public.windows.server.networking)
    • Re: Two NICs in one machine and same LAN?
      ... > which way to go to get to a machine that is on one or the other networks. ... > have one IP address for both NICs. ... > not both will be disabled due to a NetBIOS name conflict. ... > Suppose a query is sent to DNS for this machine and DNS gives the 10.1.1.1 ...
      (microsoft.public.win2000.dns)
    • Re: Multihomed server
      ... >> These NICs aren't on the same subnet, they're on different networks. ... > understand why to did it, I suspect it is not the right reason. ... computers are on both LANs, they can see each other using either NIC. ...
      (microsoft.public.windows.server.networking)