IDS mailing list archives

RE: port mirroring for two targets


From: "Matt Percival" <MPercival () toplayer com>
Date: Mon, 30 Jul 2007 05:01:51 -0400

You could try using TopLayer's IDSLB as this is something we have been
doing for some years now! Apologies for jumping in as a vendor. 



-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Koch, Christian
Sent: 18 July 2007 19:30
To: JGolian () seznam cz; focus-ids () securityfocus com
Subject: RE: port mirroring for two targets

What kind of switch are you using? 

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of JGolian () seznam cz
Sent: Wednesday, July 18, 2007 7:41 AM
To: focus-ids () securityfocus com
Subject: port mirroring for two targets

I need port mirrored data for snort and for ntop.
How to make it? Is possible to create two mirroring ports?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=intro_sfw
to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=intro_sfw 
to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------


Current thread: