Re: Snort Rules

Fritz,

You are way over my head, which other than the fact I am tall, isn't a real 
surprise :-)

When you say:

<I use it on an old p75 linux box to monitor the ethernet lines. Usually, the 
box has no
IP address.  The NIC is set to promiscuous mode and just reviews the data 
stream for
known hacks and attacks.  So, with the iSeries, the Intrusion Detection box 
would sit on
the ethernet line running to the ethernet port on the iSeries.  There's a given 
set of
rules supplied with the download, but I feel there should be some added for the 
iSeries
environment.>

Are you saying the actual incoming ethernet from the router passes through this 
PC and
then onto the iSeries ?

Thanks and sorry if this is a dumb question...

Chuck