I am a complete beginner with IDS. I have my home PC connected to the internet via NIC/router. The home network also has wifi.
I thought it would be fun/interesting to see what was going on (is anyone hacking me etc). I started using Wireshark and then read about Snort and Snorby. Security Onion looks about as close as I can get to an easy way to install what I need; at least there are some helpful tutorials on Youtube.
I have the Security Onion iso and VMware Player.
When installing, I note on the tutorials that there are two NICs being used. I only have one physical NIC and I guess VMware doesn't magically make another one.
So, am I wasting my time unless I buy another physical NIC and somehow connect it to my PC?
Thanks and sorry for what must be such basic questions to all of you.
Hi
I usually just add another NIC to VM which is just internal/management and the external/monitoring interface is set to bridge-mode in the VM configuration.
Also have a look at the SecurityOnion Wiki page which has a ton of FAQ and tourturials.
Regards,
Lysemose
--
You received this message because you are subscribed to the Google Groups "security-onion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to security-onio...@googlegroups.com.
To post to this group, send email to securit...@googlegroups.com.
Visit this group at http://groups.google.com/group/security-onion.
For more options, visit https://groups.google.com/d/optout.