Snort mailing list archives

RE: Network traffic forwarder (hardware device)


From: "McCammon, Keith" <Keith.McCammon () eadvancemed com>
Date: Fri, 28 Jun 2002 15:46:44 -0400

You're looking for taps.  There is a pretty good article on SecurityFocus last week on this very subject (also has 
links to vendors).  Check it out here:
 
http://online.securityfocus.com/infocus/1594
-----Original Message-----
From: Lee, Mike (BlackBoard Support) [mailto:MLee () mtech edu]
Sent: Friday, June 28, 2002 3:05 PM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Network traffic forwarder (hardware device)


Hello everyone,
 
            I know some of you have told me this before, but I am asking again.  Can you send me a URL of a company 
that makes a device which forwards (actually duplicates) the network traffic.  I saw one before, it has one RJ-45 input 
and two outputs; one to say your firewall and the other to a snort machine.  I need one of these so I can see all of 
the nasty port scans on my snort box before they hit my netfilter firewall, which drops scans before snort can take 
effect.
            Thanks in advance.
 
Mike

Current thread: