Snort mailing list archives
RE: SPAN
From: Owen Creger <OCreger () CreativeSolutions com>
Date: Tue, 20 Aug 2002 15:32:31 -0400
It should work on the 3500XL series. I'm doing it on 2900XL's which are simular. Use the command: port monitor <interface> -----Original Message----- From: Tom Sevy [mailto:tsevy () epx com] Sent: Monday, August 19, 2002 8:30 PM To: snort-users () lists sourceforge net; 'twr () bellsouth net' Subject: RE: [Snort-users] SPAN I'm doing this with 3500xl series switches. -----Original Message----- From: hackerwacker [mailto:hackerwacker () cybermesa com] Sent: Monday, August 19, 2002 6:31 PM To: snort-users () lists sourceforge net Subject: Re: [Snort-users] SPAN Would need to know to model # of the switch to answer as Cisco makes lots of "switches". ----- Original Message ----- From: Tim <mailto:twr () bellsouth net> To: Snort-list <mailto:snort-users () lists sourceforge net> Sent: Monday, August 19, 2002 6:34 PM Subject: [Snort-users] SPAN Hey ppl, Quick question, will snort sensors play with monitored ports on a Cisco 10/100 switch or is placing a hub be the better way to setup the sensors? Tim -- Mia/Fla