Beginner question: Using Security Onion with only one NIC on Home Network (via VMware Player)

1,501 views
Skip to first unread message

Tech House

unread,
Nov 18, 2014, 6:52:57 PM11/18/14
to securit...@googlegroups.com
Hi there,

I am a complete beginner with IDS. I have my home PC connected to the internet via NIC/router. The home network also has wifi.

I thought it would be fun/interesting to see what was going on (is anyone hacking me etc). I started using Wireshark and then read about Snort and Snorby. Security Onion looks about as close as I can get to an easy way to install what I need; at least there are some helpful tutorials on Youtube.

I have the Security Onion iso and VMware Player.

When installing, I note on the tutorials that there are two NICs being used. I only have one physical NIC and I guess VMware doesn't magically make another one.

So, am I wasting my time unless I buy another physical NIC and somehow connect it to my PC?

Thanks and sorry for what must be such basic questions to all of you.

Heine Lysemose

unread,
Nov 19, 2014, 1:48:26 AM11/19/14
to securit...@googlegroups.com

Hi

I usually just add another NIC to VM which is just internal/management and the external/monitoring interface is set to bridge-mode in the VM configuration.

Also have a look at the SecurityOnion Wiki page which has a ton of FAQ and tourturials.

Regards,
Lysemose

--
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To post to this group, send email to securit...@googlegroups.com.
Visit this group at http://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.
Reply all
Reply to author
Forward
0 new messages