Snort mailing list archives

Re: Taps and 10/100 hubs


From: Jeff Kell <jeff-kell () utc edu>
Date: Wed, 25 Aug 2004 21:43:38 -0400

Craig Paterson wrote:

Bamm Visscher wrote:

The intelligent bridge is between 10MB and 100MB traffic.  Since your
IDS nic is 100MB, it will never see the 10MB traffic being sent to the
hub (unless your nic can be forced down to 10MB). Even if you can
force the nic to negotiate down to 10MB, every time you see that
collision light on the hub go blinky-blink, another packet will be
lost to /dev/null, never to be seen again (and since the router/switch
passed the packet on w/o problems, don't expect a retransmit). On the
positive side, your perf stats will rock ;)

The 10/100 transition to hubs and then switches was a rather rocky one and had many misleading claims (or at least nomenclature) between various vendors. One vendor offered a "10/100 switch" but failed to mention that it did not bridge between the different speeds. It was a 10Mb and a 100Mb hub that "switched" you to the proper backplane based on your autonegotiation status. In either case, it was half-duplex, as it was essentially two hubs.
If you wanted to uplink both 10 and 100 you needed to run two uplinks.

Even more would play "least common denominator" so that if you hooked all 100Mb devices, it would feed out 100Mb (half duplex). Otherwise if it negotiated down to 10Mb, it reset itself to essentialy a 10Mb hub.

Back in the dark ages, Synoptics had a 5000 "switch". But if you analyzed it down to the network level, the thing had 12 separate 10Mb backplanes, annd you could assign any input port to any of the 12 backplanes. But it was most decidedly an (expensive) 10Mb hub.

(Been there, done that, it's quite dead and gone now).

Jeff


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: