IDS: Re: Multiple network segment monitor with Snort

From: Sergio Pozo Hidalgo <blitter_es_at_yahoo.es>
Date: Wed, 01 Oct 2003 21:40:29 +0200

Forrest, Reid wrote:

> Yes you can. We've deployed sensors with up to 12 NICs running independent
> snort processes. CPU utilization is surprisingly low. You can also use
> separate snort.conf files for each NIC so you can tweak the alerts for
> different networks (i.e. inside vs. outside).

Which hardware did you use to install 12 NICs?

Cheers

---------------------------------------------------------------------------
Captus Networks IPS 4000
Intrusion Prevention and Traffic Shaping Technology to:
- Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
- Automatically Control P2P, IM and Spam Traffic
- Precisely Define and Implement Network Security & Performance Policies
FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo
http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
---------------------------------------------------------------------------
Received on Oct 02 2003