View Single Post
  #1   (View Single Post)  
Old 1st June 2011
unixjingleman unixjingleman is offline
Fdisk Soldier
 
Join Date: Jan 2011
Posts: 70
Default Question about Snort sensor placement

Hi there
Erm my network looks like this:

|Internal hosts|--|switch|---|OpenBSD firwall|-----|switch|---|border router|

My servers are attached to the switch, that is attached to the border router. I would very much like to use snort on OpenBSD. I have one spare machine(for loghost and/or snort sensor).
Am i right in thinking that my only option, to monitor my servers at little extra cost, is to attach a hub to the switch that my servers are attached to, then attach the snort box and the servers to this hub?
There are no other low cost solutions, correct?
Thank you very much for any advice
Reply With Quote