In addition to Will's "nod" that it can be done...
There are actually 2 instances of snort running along
*with* snort_inline on the currently available
Honeywall CDROM.
o Snort_Inline - used for Data Control
o (1) Snort instance monitors the internal (Honeypot
side) interface and reports fast/full
o (1) Snort instance to produce full packet pcap logs
of all traffic traversing the internal Honeywall
interface
Earl
--- Will Metcalf <wil...@gm...> wrote:
> You can do this without a problem.
>
> Regards,
>
> Will
> On Fri, 12 Nov 2004 18:44:00 -0500, mdpeters
> <mic...@la...> wrote:
> >
> > Can Snort be installed with Snort-inline on the
> same box? Any issues with
> > bridging Snort-inline and running the other
> interfaces as sensors?
> >
> > Best regards,
> >
> > Michael
>
>
>
-------------------------------------------------------
> This SF.Net email is sponsored by: InterSystems
> CACHE
> FREE OODBMS DOWNLOAD - A multidimensional database
> that combines
> robust object and relational technologies, making it
> a perfect match
> for Java, C++,COM, XML, ODBC and JDBC.
> www.intersystems.com/match8
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
>
https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>
__________________________________
Do you Yahoo!?
The all-new My Yahoo! - Get yours free!
http://my.yahoo.com
|
