[Snort-users] oracle 10g

--===============0403947661==
Content-Type: multipart/alternative; boundary="0-1166766133-1177821607=:1731"
Content-Transfer-Encoding: 8bit

--0-1166766133-1177821607=:1731
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Has any one seen or know of good ways to tap and configure snort for an oracle rac cluster. I'm exploring ideas for tapping a 5 or 6 node cluster with redundant interfaces on each node.

if anyone has experience tapping oracle instances i'd be interested to know what works and what doesn't. I'm guessing that i'll have a very slim config, home_net and oracle_servers will be the same.

I'm not sure if i'll be able to tap each host individually, or better yet tap an aggregation point.

thanks,
todd





---------------------------------
Ahhh...imagining that irresistible "new car" smell?
Check outnew cars at Yahoo! Autos.
--0-1166766133-1177821607=:1731
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Has any one seen or know of good ways to tap and configure snort for an oracle rac cluster. I'm exploring ideas for tapping a 5 or 6 node cluster with redundant interfaces on each node. <br><br>if anyone has experience tapping oracle instances i'd be interested to know what works and what doesn't. I'm guessing that i'll have a&nbsp; very slim config, home_net and oracle_servers will be the same. <br><br>I'm not sure if i'll be able to tap each host individually, or better yet tap an aggregation point. <br><br>thanks, <br>todd<br><br><br><br> <p>

<hr size=1>Ahhh...imagining that irresistible "new car" smell?<br> Check out
<a href="http://us.rd.yahoo.com/evt=48245/*http://autos.yahoo.com/new_cars.html;_ylc=X3oDMTE1YW1jcXJ2BF9TAzk3MTA3MDc 2BHNlYwNtYWlsdGFncwRzbGsDbmV3LWNhcnM-">new cars at Yahoo! Autos.</a>

--0-1166766133-1177821607=:1731--


--===============0403947661==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
--===============0403947661==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
--===============0403947661==--