IDS mailing list archives
Re: port mirroring for two targets
From: "Andrew Hay" <andrewsmhay () gmail com>
Date: Wed, 18 Jul 2007 15:46:06 -0300
It depends on the make and model of the device you're trying to create the mirrored port on. Some devices don't allow you to create more than one mirrored interface for a particular port. You may also want to look at getting a network tap which would probably allow you to monitor a particular interface with multiple sensors. Hope this helps. On 18 Jul 2007 11:41:15 -0000, JGolian () seznam cz <JGolian () seznam cz> wrote:
I need port mirrored data for snort and for ntop. How to make it? Is possible to create two mirroring ports? ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
-- Andrew Hay blog: https://www.andrewhay.ca email: andrewsmhay || at || gmail.com ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly?Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more.
------------------------------------------------------------------------
Current thread:
- port mirroring for two targets JGolian (Jul 18)
- Re: port mirroring for two targets Andrew Hay (Jul 19)
- RE: port mirroring for two targets Luis Lopez Sanchez (Jul 19)
- RE: port mirroring for two targets Stephane Boulet (Jul 19)
- RE: port mirroring for two targets Phillip Oliven (Jul 19)
- Re: port mirroring for two targets Dogten (Jul 19)
- RE: port mirroring for two targets Koch, Christian (Jul 19)
- Re: port mirroring for two targets Andrew Hay (Jul 19)