Re: NIDS
"Al Lewis \(allewi\) via Snort-users" <[email protected]>
| Newsgroups | gmane.comp.security.ids.snort.general |
|---|---|
| Message-ID | <[email protected]> |
Hello, You will either need to span the traffic to the machine with snort or place snort inline. This will allow snort to see the traffic. Albert Lewis ENGINEER.SOFTWARE ENGINEERING Cisco Systems Inc. Email: [email protected]<mailto:[email protected]> From: Snort-users <[email protected]> on behalf of Ons Romdhane via Snort-users <[email protected]> Reply-To: Ons Romdhane <[email protected]> Date: Friday, May 20, 2022 at 5:52 PM To: "[email protected]" <[email protected]> Subject: [Snort-users] NIDS hello, i'm new on snort. i use snort3, when i tested with ping (exemple rule : alert icmp any any -> any any (msg:"icmp test") ) in the machine containing snort i get an alert but when i try to ping between other pcs i don't find alert. PS : i use this command : ethtool -K enp0s8 gro off lro off snort install on a physical machin / and the other pc, one is on vmware and the other is a physical machine(there is connectivity). _______________________________________________ Snort-users mailing list [email protected] Go to this URL to change user options or unsubscribe: https://lists.snort.org/mailman/listinfo/snort-users To unsubscribe, send an email to: [email protected] Please visit http://blog.snort.org to stay current on all the latest Snort news! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette