Snort mailing list archives
Re: Which switches are recommneded
From: "CS Lee" <geek00l () gmail com>
Date: Mon, 18 Dec 2006 03:32:47 +0800
Hey Albert, Seems my blog post comes to the right time - http://geek00l.blogspot.com/2006/12/3com-3226-enable-port-mirroring.html 3Com super stack definitely allow port mirroring, but if you want more flexible port mirroring and you can consider superstack 4000 series as it supports traffic mirroring based on acl which is more flexible. By the way Cisco switch definitely support span port but again everything comes with the prize :) Cheers. On 12/17/06, Albert E. Whale <aewhale () abs-comptech com> wrote:
I have an opportunity to implement a Corporate backbone with the right tools. I originally was reviewing the Linksys Managed Switches, until I discovered that these devices do not support SPAN (Switch Port ANalyzer), which permits traffic to be monitored by another port (did I need to say this in this group, probably not!). Anyway, are there any other switches being used that permit the Snort IDS to monitor traffic in the switch (without using an external device?). TIA -- Albert E. Whale, CHS CISA CISSP Sr. Security, Network, Risk Assessment and Systems Consultant ------------------------------------------------------------------- ABS Computer Technology, Inc. - www.ABS-CompTech.com SPAM Zapper - No-JunkMail.com - Spam-Zapper.com - SPAM Stops Here. ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Best Regards, CS Lee<geekooL[at]gmail.com>
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Which switches are recommneded Albert E. Whale (Dec 17)
- Re: Which switches are recommneded CS Lee (Dec 17)
- Re: Which switches are recommneded Patrick S. Harper (Dec 17)
- Re: Which switches are recommneded Eric Hines (Dec 17)
- Re: Which switches are recommneded Albert E. Whale (Dec 18)
- Re: Which switches are recommneded Jeff Coppock (Dec 17)
- <Possible follow-ups>
- Re: Which switches are recommneded Michael Scheidell (Dec 17)