RE: Snort with SingleStream device?

["Eric Hines" <eric.hines () appliedwatch com>]

JP,

We are more partial to Net Optics, we've had tremendous success with them,
recently deploying over 23 Snort IDS agents with the Net Optics 10/100 Port
Aggregator. Net Optics out of all the taps we've reviewed are the only ones
that offer circuit-level passive tapping that provides zero delay when the
power is cut. We pulled the power cord on the tap and experienced absolutely
no packet loss or delay while running Snort in sniffer mode.

The Port Aggregators allow you to no longer have to do port bonding in Linux
on a Snort sensor, eliminating having to waste a second NIC. The Port Aggs
bond the A and B ports together in to a single monitoring port on the Tap.

More information:

http://www.appliedwatch.com/products/netoptics/taps.php




Best Regards,


Eric Hines, GCIA, CISSP
CEO, President, Chairman
Applied Watch Technologies, LLC
1134 N. Main St.
Algonquin, IL 60102
Tel: (877) 262-7593 x327
Fax: (877) 262-7593
Web: http://www.appliedwatch.com
 
-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of JP Garcia
Sent: Monday, January 31, 2005 11:45 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] Snort with SingleStream device?

Anyone have experience using Snort in with a full duplex tap like the
SingleStream Tap
(http://www.datacomsystems.com/datacom/prod/taps/eth/singlestream.asp)?
If so, how well did it work out for you?  Thanks for the insight!

 =======================================
 J.P. Garcia
 Network Engineer
 Network Advocates, Inc
 E-Mail: jgarcia () networkadvocates com
 Web:  http://www.networkadvocates.com/
 =======================================



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool
for open source databases. Create drag-&-drop reports. Save time by over
75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users