RE: preprocessor arpspoof

[Matt Kettler <mkettler () evi-inc com>]

At 03:11 AM 8/17/2004, Juan Fernandez wrote:
> How I use arpwatch with snort ?
>
> I didn't see even the word arpwatch in snort.conf...
>
> Sorry im new to snort.

Arpwatch isn't a part of snort.. it's a completely separate tool, but it's 
a better tool for the job of monitoring arps than snort is.

Snort's a great IDS, but arp analysis isn't it's strong suit.. Arpwatch 
isn't an IDS at all, but it's very good at arp analysis.






-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users