IDS mailing list archives
Re: port mirroring for two targets
From: "Paul Halliday" <paul.halliday () gmail com>
Date: Fri, 3 Aug 2007 22:14:23 -0300
Providing you are referring to the same stream of data, you would not require 2. I use numerous tools; netflow, snort, sancp, etc all utilizing the same data from the same span port. Why would you need two? Can you provide more detail on what exactly it is you are trying to achieve?
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of JGolian () seznam cz Sent: Wednesday, July 18, 2007 7:41 AM To: focus-ids () securityfocus com Subject: port mirroring for two targets I need port mirrored data for snort and for ntop. How to make it? Is possible to create two mirroring ports?
------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
Current thread:
- RE: port mirroring for two targets Matt Percival (Aug 03)
- Re: port mirroring for two targets Paul Halliday (Aug 07)
- <Possible follow-ups>
- Re: Re: port mirroring for two targets JGolian (Aug 09)
- Re: port mirroring for two targets Gary Halleen (Aug 10)
- Re: RE: port mirroring for two targets JGolian (Aug 09)