Snort mailing list archives

Re: A question about taps


From: Eric Hines <eric.hines () appliedwatch com>
Date: Fri, 16 Sep 2005 10:17:37 -0500

Joel's right... you could call a $5.00 hub a Tap too :)



On Fri, 2005-09-16 at 10:16 -0400, Joel Esler wrote:
Are you sure it's a tap?  "it does exactly what a tap should do and  
outputs all traffic it receives
on any of the 3 ports to all the other ports."  -- Sounds like a  
hub to me.

Joel Esler

On Sep 16, 2005, at 9:45 AM, Brett, Gary wrote:

Hi there

Just a quick question, I have in my possession a simple little  
plastic tap
(basically a little adapter type thing that has 3 RJ48 ports on it,  
it is
not a powered device just a little internally wired adapter). After  
testing
it, it does exactly what a tap should do and outputs all traffic it  
receives
on any of the 3 ports to all the other ports.

My question is this, from reading snort mailing list archives and  
FAQ's,
people are suggesting that one should invest in a more complex,  
powered unit
e.g. Shomiti, Finisar and Netoptics etc costing many hundreds of  
dollars in
some cases. I would just like to know why my little plastic $5  
gizmo is not
on that list of recommended items ? Is there something my gizmo  
does or does
not do that makes it a bad choice for a SNORT NIDS (even in my  
small test
environment). I would really like to know


Any help on this would be greatly appreciated
Gary


-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.  
Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users





-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: