Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

Setting up a snort IDS (need help)

  • 12-07-2015 05:38PM
    #1
    whats newxt
    Closed Accounts Posts: 431 ✭✭


    So, i have decided to setup a snort IDS with some sort of GUI to display the info. My main problem though is how do i set it up in terms of physical network, i want to monitor all traffic on the LAN. Right now the isp connection comes into the house and straight into the router where do i connect the snort computer?

    Thanks for your time/help.


Comments

  • #2
    Blowfish
    Registered Users, Registered Users 2 Posts: 5,112 ✭✭✭Blowfish


    Set the router into bridge mode, then just have a second router with OpenWRT/DD-WRT & Snort on it.


  • #3
    whats newxt
    Closed Accounts Posts: 431 ✭✭whats newxt


    Blowfish wrote: »
    Set the router into bridge mode, then just have a second router with OpenWRT/DD-WRT & Snort on it.

    Thanks thats the perfect solution.


  • #4
    Khannie
    Registered Users, Registered Users 2 Posts: 37,485 ✭✭✭✭Khannie


    Blowfish wrote: »
    Set the router into bridge mode, then just have a second router with OpenWRT/DD-WRT & Snort on it.

    Sounds delightful (not joking), but snort's a bit of a CPU and space whore for the rules, right?


Advertisement