[ale] Snort

[cfowler at outpostsentinel.com (Christopher Fowler)]

I'm having a hard time trying to actually figure out what is
the easiest implmentation of snort on an older RH box.

[ DSL Ethernet Bridge ]
          |
          | Public
          |
[ Linux RH 7.2 Firewall ]
          |
          | Private
          |
       [switch]

Does snort place the interface in promiscious mode?  Do I just
build it and tell it to listen on the public interface (eth0) ?
Should I purchase and install an new network card?

Thanks,
Chris

_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale