Snort mailing list archives
Re: Tap and Hub
From: Nick Moore <nmoore () sourcefire com>
Date: Wed, 24 Mar 2010 14:17:56 -0500
David, That's why larger switches have the SPAN feature. In essence, it repeats the traffic of some or all the other switch ports out a designated port for sniffers or IDS sensors. Here's more info: http://www.enterprisenetworkingplanet.com/nethub/article.php/3766701 http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml Nick On Wed, Mar 24, 2010 at 2:14 PM, D. Hofstee <hofstee () gmail com> wrote:
---------- Forwarded message ---------- From: D. Hofstee <hofstee () gmail com> Date: Wed, Mar 24, 2010 at 8:13 PM Subject: Re: [Snort-users] Tap and Hub To: Eoin Miller <eoin.miller () trojanedbinaries com> well, for the sake of being curious: how do people monitor inter-server traffic? A tap in front of the switch doesn't do the job. bye, David On Wed, Mar 24, 2010 at 7:11 PM, Eoin Miller < eoin.miller () trojanedbinaries com> wrote:Here is a good article/writeup about this: http://www.lovemytool.com/blog/2007/08/span-ports-or-t.html -- Eoin On 3/24/2010 4:12 PM, akos.daniel () db-soft hu wrote:Hi, What is the difference between a network hub and a network tap? Maybe a stupid question, but is there a "gigabit hub" on the market orforgigabit should I look for a tap? (span port is not possible in my case...) Thanks for the info. Akos------------------------------------------------------------------------------Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users%0ASnort-users>list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- Nick Moore, SFCE, CISSP, CISA Sr. Systems Engineer Voice 708-336-9041 Email nick.moore () sourcefire com IM nickgmoore (Yahoo) nickgmoore38 (AIM) ,,_ o" )~ Sourcefire - The Creators of Snort '''' www.sourcefire.com www.snort.org
------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Snort Host Attribute table, (continued)
- Re: Snort Host Attribute table JJ Cummings (Mar 23)
- Re: Snort Host Attribute table Andy Berryman (Mar 23)
- Re: Snort Host Attribute table Alex Tatistcheff (Mar 24)
- Tap and Hub akos . daniel (Mar 24)
- Re: Tap and Hub Crook, Parker (Mar 24)
- Re: Tap and Hub Richard Bejtlich (Mar 26)
- Re: Tap and Hub Eoin Miller (Mar 24)
- Re: Tap and Hub Lee Clemens (Mar 24)
- Re: Snort Host Attribute table Andy Berryman (Mar 23)
- Re: Tap and Hub Eoin Miller (Mar 24)
- Message not available
- Tap and Hub D. Hofstee (Mar 24)
- Re: Tap and Hub Nick Moore (Mar 24)
- Re: Snort Host Attribute table JJ Cummings (Mar 23)
- Re: Snort Host Attribute table Jason Wallace (Mar 24)
- Re: Snort Host Attribute table Jason Wallace (Mar 25)
- Re: Snort Host Attribute table Crook, Parker (Mar 25)
- Re: Snort Host Attribute table Jason Wallace (Mar 25)
- Re: Snort Host Attribute table Matt Olney (Mar 25)
- Re: Snort Host Attribute table Jason Wallace (Mar 25)
- Re: Snort Host Attribute table Joel Esler (Mar 25)
- Re: Snort Host Attribute table Joel Esler (Mar 25)