RE: Snort readng across switches?

[SN ORT <snort_on_acid () yahoo com>]

Cascaded has nothing to do with port
spanning/mirroring. THe only traffic you're gonna see
on a switch is traffic destined for you port only,
plus the broadcasts. If you need to see traffic going
to/from a central router, use the switch to mirror the
router's port....

Cheese!

Marc

> Message: 2
> Date: Mon, 26 Jan 2004 11:44:23 -0500 (GMT-05:00)
> From: "M. Morgan" <mikemorgan () mindspring com>
> Reply-To: "M. Morgan" <mikemorgan () mindspring com>

> To: snort-users () lists sourceforge net
> Subject: [Snort-users] Snort readng across switches?

> Hello all,
> I've noticed that my snort sensors, plugged into
> different places on cascaded cisco 2600 series
> switches are getting different readings. This leads
> me to believe that snort is only sensing traffic on
> the switch it is plugged into. Does it read across
> cascaded switches or must each switch have a snort
> node sniffing it?

> Thanks,
> Michael


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users