mirror port on dual interface running on snort

["sateesh" <sateesh.kumar () 247customer com>]

Hi

1) i have installed snort on dual interface server its working fine.

 2) i configured Mirror port on switch port (this port will collect all VLAN
info)

        | =====  with ip address 192.168.1.20
snort server with 2 nic
         |====== switch SPAN port(with out ip add)

Right now i am getting snort alerts from only one subnet i.e
192.168.1.0..... If i configure snort on mirror port then i will get all
subnet info (Ex:192.168.1.0,2.0,3.0 etc)

So, pls let me know How to configure a snort on this scenario


Regards,



Sateesh Kumar.Kolagani


----------------------------------------------------------------------------
----

|Network Engineer| 24/7 Customer |<Office: +91-40-23122247  xtn
105>|<Mobile: +91-98493-69829>|<Fax:
+91-40-23122248>|mailto:sateesh.kumar () 247customer com|

|<247 Customer, Level 1, Block "B", Cyber Gateway, Madhapur,
Hyderabad-500081>| Website: www.247customer.com |