Monitoring Multiple Subnets

[Shaun Marlin <shaun.marlin () canalta com>]

I am building a SNORT box to monitor my network.  I have 2 ISP's.  Is it possible to have the 2 ISP's connect into an 
unmanaged switch, then have SNORT configured with an IP from each block that I have, and finally pass the traffic back 
onto the switch that goes into my network?

Sorry for the run on question there

Essentially I am looking for something like this


                [cid:image002.png@01CE4FB8.CC852E20]
                [cid:image006.png@01CE4FB8.CC852E20]
        [cid:image001.png@01CE4FB8.CC852E20]






[cid:image001.png@01CE4FB8.CC852E20]ISP 1
                                                                                                                        
                                               Router 1                                                                 
                                                                                                      Internal Network

[cid:image004.png@01CE4FB8.CC852E20]





                [cid:image004.png@01CE4FB8.CC852E20]


[cid:image011.png@01CE4FB8.CC852E20]ISP 2                                                                               
                                                              Router 2

[cid:image013.png@01CE4FB8.CC852E20]                                                                                    
        SNORT


                                Unmanaged Switch


SNORT would endup monitoring 3 different subnets.  For instance 1.1.1.0/27 2.2.2.0/27 and 3.3.3.0/29.

Does anyone see a reason why this would not work


Shaun Marlin
Network Administrator

[cid:canaltalogobc15d2]
Canalta Family of Companies


2109 - 545 Highway 10 East
Drumheller AB Canada T0J 0Y0
PHONE: (403) 820-3865
CELL:     (403) 334-1313


EMAIL:   shaun.marlin () canalta com
WEB:      www.canalta.com

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and 
their applications. This 200-page book is written by three acclaimed 
leaders in the field. The early access version is available now. 
Download your free book today! http://p.sf.net/sfu/neotech_d2d_may

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!