Re: Snorting on a Layer-3 switch

[Andy Shelley <andy () cbeyond net>]

You can't.  Been there, done that.  Get a 3550 if you need a L3 switch, 
the 2948 is slated to be EoL'd anyway.

On Tuesday, August 6, 2002, at 11:50 AM, Nick Lomonte wrote:

> Hi all,
>
> I've been trying to figure out a way to set up an IDS on a Layer-3 
> switch.  I'm using the Cisco 2948G-L3.  It doesn't have the standard 
> 'port monitor' commands.  I have most ports in the same bridge-group, 
> and a few that are routing.   I'm only interested in snorting the 
> bridge group though.
>
> Has anyone else done this, or know a way to do it?
>
> Thanks
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
--
Andy Shelley
Cbeyond Communications
andy () cbeyond net



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users