xen-users

[Top] [All Lists]

[Xen-users] Running snort on dom0

from [Torsten Lehmann]

[Permanent Link][Original]

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	[Xen-users] Running snort on dom0
From:	Torsten Lehmann <tlehmann@xxxxxxxxxxxxx>
Date:	Wed, 16 May 2007 21:34:14 +0200 (CEST)
Delivery-date:	Thu, 17 May 2007 02:52:41 -0700
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

> I need to monitor all traffic and block bad requests on my guest
> machines and also on my xen host. To accomplish this I think to
> install snort on my dom0 host (rhel5). Somebody have
> tried this? What about performance on guests??

- work identical to fw,sniffer,net-acct...

  --- peth0  ---- eth0 ----- dom0
              |
              --- vif1.0 --- dom1

- snort read default from eth0
- would you scan complete traffic, bind snort to peth0
- would you scan dom1, bind snort to vif1.0

Torsten


--
Torsten lehmann
Launoc


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] Running snort on dom0, carlopmart [Xen-users] Running snort on dom0, Torsten Lehmann <=

Previous by Date:	[Xen-users] 2.6.20 domU kernel on 2.6.16 kernel, Torsten Lehmann
Next by Date:	Re: [Xen-users] 2.6.20-1-amd64 Xen with RHEL5 guest, Daniel P. Berrange
Previous by Thread:	[Xen-users] Running snort on dom0, carlopmart
Next by Thread:	[Xen-users] extra = "mem=1024" and maxmem, Denny Schierz
Indexes:	[Date] [Thread] [Top] [All Lists]