Monitoring multiple devices with SNORT

["David Nardoni" <dnardoni () firstresponseconsulting com>]

I want to monitor some traffic outside my firewall.

Here is how I have things set up

Internet ------  hub ---- firewall ------ LAN
                        |
                        |
                    SNORT


I am getting hits directly on the snort box and I am showing traffic coming
out of the LAN but I do not appear to be showing the traffic coming from the
internet to the firewall.

Any suggestions on where to look for the problems.




David Nardoni CISSP
First Response Consulting Services, Inc.  
dnardoni () firstresponseconsulting com 




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users