Re: stealth ports and IDS

[Jim MacLeod <jmacleod () hotpop com>]

At 08:06 AM 10/3/2002, Zen wrote:
> > mitigate it I am looking at hardware network taps (read only). These
> > could be the answere but are not that cheap (kind of the whole idea).
>
>         Just crimp an ethernet cable with only the rx couple.

This will result in no link detected on the other end, as well as no 
autonegotiation.

Far easier to configure the switch port as a mirror or span or whatever the 
vendor calls it.

-Jim


_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards