Sign in to follow this  
Followers 0
bobsana666

Snort network scan config

3 posts in this topic

I Follow the guide and everything is fine but Alerts in Base are only for the PC that is the system installed.

Is there the way that can scan all PC's in the network.

I mean that i see traffic only for my PC IP 192.168.1.161 but i wanna see other PC's traffic.

Thank you.

Share this post


Link to post
Share on other sites

The Windows Intrusion Detection System is probably plugged into a SWITCH. The Windows Intrusion Detection System needs to be plugged into a HUB with all the other PC's  on the network, or if The Windows Intrusion Detection System is plugged into a SWITCH all the ports for the PC's to be monitored  MUST be mirrored to the port The Windows Intrusion Detection System is plugged into.

 

You could do this

Share this post


Link to post
Share on other sites

 I manually add rules from YOUR GUIDE

and after that i see all the traffic. Your information is helpful too. THANK YOU !!!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0