Snort mailing list archives
Re: A question about taps
From: Joel Esler <joel.esler () sourcefire com>
Date: Fri, 16 Sep 2005 10:16:15 -0400
Are you sure it's a tap? "it does exactly what a tap should do and outputs all traffic it receives
on any of the 3 ports to all the other ports." -- Sounds like a hub to me.
Joel Esler On Sep 16, 2005, at 9:45 AM, Brett, Gary wrote:
Hi thereJust a quick question, I have in my possession a simple little plastic tap (basically a little adapter type thing that has 3 RJ48 ports on it, it is not a powered device just a little internally wired adapter). After testing it, it does exactly what a tap should do and outputs all traffic it receiveson any of the 3 ports to all the other ports.My question is this, from reading snort mailing list archives and FAQ's, people are suggesting that one should invest in a more complex, powered unit e.g. Shomiti, Finisar and Netoptics etc costing many hundreds of dollars in some cases. I would just like to know why my little plastic $5 gizmo is not on that list of recommended items ? Is there something my gizmo does or does not do that makes it a bad choice for a SNORT NIDS (even in my small testenvironment). I would really like to know Any help on this would be greatly appreciated Gary ------------------------------------------------------- SF.Net email is sponsored by:Tame your development challenges with Apache's Geronimo App Server. Downloadit for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
------------------------------------------------------- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42" plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- A question about taps Brett, Gary (Sep 16)
- Re: A question about taps Ted Kaczmarek (Sep 16)
- Re: A question about taps Joel Esler (Sep 16)
- Re: A question about taps Eric Hines (Sep 16)
- Re: A question about taps Eric Hines (Sep 16)
- <Possible follow-ups>
- Re: A question about taps Richard Bejtlich (Sep 16)
- RE: A question about taps Brett, Gary (Sep 16)
- RE: A question about taps Eric Hines (Sep 16)