Snort mailing list archives
Re: Taps and 10/100 hubs
From: Richard Bejtlich <taosecurity () gmail com>
Date: Wed, 25 Aug 2004 21:25:42 -0400
Craig Paterson wrote: I tried this setup with a Linksys that obviously had the same kind of feature; it behaved just like a switch between the 10Mbit/s and 100Mbit/s hosts and was useless for IDS. -- I've had the same experience with Linksys 10/100 Mbps "hubs," even when I bring all connected interfaces up at the same speed (either all at 10 Mbps or all at 100 Mbps). Every 10/100 Mbps "hub" is a switch; that's how devices at 10 Mbps can interoperate with those at 100 Mbps on the same "hub." However, I have had good experiences with Netgear 10/100 Mbps hubs; when bringing interfaces up, all at the same speed, they see each other. It's half-duplex, but works for giving sensors visibility to network traffic. Sincerely, Richard http://www.taosecurity.com ------------------------------------------------------- SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33 Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift. http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Taps and 10/100 hubs Richard Bejtlich (Aug 25)