Snort mailing list archives

Machine placement


From: "snortlst snortlst" <snortlst () hotmail com>
Date: Fri, 14 Sep 2001 08:33:28 -0500

I have quite a standard setup:
Firewall and external router connected to one hub.
DMZ servers connected to another hub
LAN is connected to the other hubs.
Hub are interconnected.

What is the better place to plug the snort machine in my network?
It is a 100Mb network, should I really run snort in -b (bynary) mode in that envoronment?


Current thread: