Snort mailing list archives
Re: Cisco 6500 SPAN limitations, dropping packets, VACLs, RSPAN, real world
From: twig les <twigles () yahoo com>
Date: Wed, 28 Apr 2004 09:09:31 -0700 (PDT)
You ask a lot of tough questions and I'll be honest that I don't know most the answers. We've been using 6500s in our core for years and sniffing/snorting off of them without a hitch the entire time, both on CatOS and IOS. We have about 14-15Mbps sustained traffic coming from tons of different ports, vlans and src/dst pairs through the CatOS pair and use the sniffers constantly to verify and troubleshoot traffic and have never noticed any missing traffic so I'm not sure what the ingress/egress limitations equate to in the trenches. I tried the link but it was dead, even after signing into CCO and pasting the .htm.... that got wrapped around in the email. Try posting here: http://forums.cisco.com/eforum/servlet/NetProf?page=main I have gotten a lot of good responses there as Cisco pays CCIEs to lurk the board. They have even given me crappy news (with slight sugar-coating but not marketing fluff). Let me know if you don't have a CCO login and I'll just post your email. ===== ----------------------------------------------------------- With a few exceptions, secrecy is deeply incompatible with democracy and with science. --Carl Sagan ----------------------------------------------------------- __________________________________ Do you Yahoo!? Win a $20,000 Career Makeover at Yahoo! HotJobs http://hotjobs.sweepstakes.yahoo.com/careermakeover ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Cisco 6500 SPAN limitations, dropping packets, VACLs, RSPAN, real world Jack McDonough (Apr 27)
- Re: Cisco 6500 SPAN limitations, dropping packets, VACLs, RSPAN, real world twig les (Apr 28)