Snort mailing list archives
Re: real basic starter rules
From: Harry Putnam <reader () newsguy com>
Date: Sat, 27 Apr 2002 08:24:24 -0700
Rich Adamson <radamson () routers com> writes:
Watch the Netgear stuff closely. It might not say "switch" anywhere, but some of their boxes essentially perform the switch function under some circumstances. We've been using a Netgear DS104 hub for a couple years as an access mechanism to perform professional protocol analysis (sniffing) and other network services for clients in 40+ states. When the ports on this "hub" are running at the _same_ speed (10 or 100), it performs as a hub. If the port speeds differ, it performs as a switch without any shadow of a doubt. Proven time and again. Same for some of the 3Com hubs.
Thanks.. that seems to be the problem I'm seeing. It is covered in the `ethereal' faq as well, as someone pointed out in this thread. _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- real basic starter rules Harry Putnam (Apr 24)
- Re: real basic starter rules Phil Wood (Apr 25)
- Re: real basic starter rules Harry Putnam (Apr 25)
- Re: real basic starter rules Harry Putnam (Apr 26)
- Re: real basic starter rules Rich Adamson (Apr 27)
- Re: real basic starter rules Harry Putnam (Apr 27)
- Re: real basic starter rules Harry Putnam (Apr 25)
- Re: real basic starter rules Phil Wood (Apr 25)