Re: Listening to all devices

Good morning

You need a second interface that is either plugged into a network tap of a switch span (mirror) port.


Thx

Ron Jenkins (Owner / Senior Architect / Cyber Security Consultant)
RMJ Consulting, LLC. " Supporting Companies with their Technology needs"
11715 Bricksome Ave STE B-7
Baton Rouge, LA 70816
Direct. 225-448-5214 Ext #101
Cell. 225-931-1632
Web. http://www.rmjconsulting.net<http://www.rmjconsulting.net/>
Log Siphon. http://www.logsiphon.com<http://www.logsiphon.com/>
Linkedin. www.linkedin.com/in/ronmjenkins/<http://www.linkedin.com/in/ronmjenkins/>
Twitter: www.twitter.com/RMJConsulting<http://www.twitter.com/RMJConsulting>
Facebook: www.facebook.com/rmjcsconsulting<http://www.facebook.com/rmjcsconsulting>


From: Snort-users <[email protected]> On Behalf Of Paul Giovanni
Sent: Wednesday, February 28, 2024 7:26 AM
To: [email protected]
Subject: [Snort-users] Listening to all devices


CAUTION: This email originated from outside your organization. Exercise caution when opening attachments or clicking links, especially from unknown senders.
Hello Snort community,

I am trying to get snort to detect all network packets on all network devices, but right now it seems to only be listening on the device I have it installed on. Is there something I’m missing? My config has

-- HOME_NET and EXTERNAL_NET must be set now
23 -- setup the network addresses you are protecting
24 HOME_NET = '10.0.0.0/24'

All I’m seeing are broadcast messages.

Thanks,

Paul Giovanni​​​​
IT Project Manager
Edison, NJ<https://goo.gl/alXFy5> P: <tel:7329855000> (732) 985-5000<tel:7329855000>
Gloucester City, NJ<https://goo.gl/PgMNnW> P: (856) 212-0050<tel:8562120050>
[cid:[email protected]]<https://www.facebook.com/RaritanGroup/>
[cid:[email protected]]<https://www.instagram.com/raritangroup/>
[cid:[email protected]]<https://www.linkedin.com/company/raritan-group>
[cid:[email protected]]<http://www.raritangroup.com/>



PRIVILEGED & CONFIDENTIAL COMMUNICATION:
The information contained in this transmission may be privileged, confidential, and exempt from disclosure under applicable law. It is intended only for the use of the intended recipient. If you are not the intended recipient, you are hereby on notice that any unauthorized disclosure, dissemination, distribution, duplication, or taking any action in reliance on the contents of the electronically transmitted materials or contents of this communication is strictly prohibited. If you have received this communication in error, please contact the sender by reply e-mail and destroy all copies of the original message.

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette