Hello, I am new to snort. I have a stupid question: to preform Snort IDS or sniffing, do I require port mirroring? If so, I assume one Interface would be blank, and mirrored to the port I want to monitor. 2nd interface would be my internal .
thank you