Clicky

Hi I have configured Snort on Ubuntu 10.0.4 LTS. Snort is having to nic

eth1 - 10.5.0.172  Managment Port
eth0 - Snort Port   Snort Port

i have a 2960 Catalyst Switch in which

eth1 is connected to fa0/1
eth0 is connected to fa0/2

i have created a vlan 20 in which all ports are in vlan 20 except port fa0/2.

plz guide me how to configure span port for fa0/2 so that snort should show me all the traffic.

Thanks

asked 11/14/2011 02:14

Mbhushan's gravatar image

Mbhushan ♦♦


5 Answers:
link

answered

Mbhushan's gravatar image

Mbhushan

plz ignore above attachment here is the attachmet in which snort is not sniffing any traffic.
link

answered 2011-11-14 at 10:15:35

Mbhushan's gravatar image

Mbhushan

conf t
monitor session 1 source vlan 20
monitor session 1 destination interface fa0/2

Best regards
Kvistofta
link

answered 2011-11-14 at 10:18:47

Kvistofta's gravatar image

Kvistofta

thanks kvistoffa,

eth1 is connected to fa0/1 (this port is also in vlan 20)

well i have done some config in switch even than snort is tottaly blank.

and in Home_Net any (i have done any) even than  its not sniffing the traffic.
link

answered 2011-11-14 at 10:56:28

Mbhushan's gravatar image

Mbhushan

Well I know nothing about snort and the question was about how to configure span port in your switch. I suggest that you close this question and open a new one that focuses on Snort.

Best regards
Kvistofta
link

answered 2011-11-14 at 11:31:48

Kvistofta's gravatar image

Kvistofta

Your answer
[hide preview]

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Tags:

×1

Asked: 11/14/2011 02:14

Seen: 176 times

Last updated: 11/15/2011 01:40