Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Setting up a snort IDS (need help)

  • 12-07-2015 06:38PM
    #1
    whats newxt
    Closed Accounts Posts: 431 ✭✭


    So, i have decided to setup a snort IDS with some sort of GUI to display the info. My main problem though is how do i set it up in terms of physical network, i want to monitor all traffic on the LAN. Right now the isp connection comes into the house and straight into the router where do i connect the snort computer?

    Thanks for your time/help.


Comments

  • #2
    Blowfish
    Registered Users, Registered Users 2 Posts: 5,112 ✭✭✭Blowfish


    Set the router into bridge mode, then just have a second router with OpenWRT/DD-WRT & Snort on it.


  • #3
    whats newxt
    Closed Accounts Posts: 431 ✭✭whats newxt


    Blowfish wrote: »
    Set the router into bridge mode, then just have a second router with OpenWRT/DD-WRT & Snort on it.

    Thanks thats the perfect solution.


  • #4
    Khannie
    Registered Users, Registered Users 2 Posts: 37,485 ✭✭✭✭Khannie


    Blowfish wrote: »
    Set the router into bridge mode, then just have a second router with OpenWRT/DD-WRT & Snort on it.

    Sounds delightful (not joking), but snort's a bit of a CPU and space whore for the rules, right?


Advertisement