Snort mailing list archives
Re: Tap problem.
From: Frank Knobbe <frank () knobbe us>
Date: Sat, 19 Jun 2004 18:08:11 -0500
On Sat, 2004-06-19 at 14:35, Paul W Halliday wrote:
I just finished building a second tap as per the instructions at http://www.snort.org/docs/tap/. Has anyone else built one of these? and if so do you get a link light on the NIC plugged into tap A? I was under the impression that either A or B would carry traffic if the device was full duplex. All I pick up it outgoing traffic.
I've been using the read-only cable for years now, but it is constructed a bit different (see ASCII drawing in the FAQ). In order to get a link, you have to connect pins 1 and 2 on the sniffer/snort interface. Apparently that is not described in Michael's tap drawing. Go ahead and short-circuit pin 1 and 2 on both Tap A and Tap B ports individually. That should fake a link on the sniffer card(s). Regards, Frank
Attachment:
signature.asc
Description: This is a digitally signed message part
Current thread:
- Tap problem. Paul W Halliday (Jun 19)
- Re: Tap problem. Frank Knobbe (Jun 19)
- Re: Tap problem. Paul W Halliday (Jun 19)
- Re: Tap problem. Frank Knobbe (Jun 19)