Tipping Point question

[Becca Kastl <becca.kastl () gmail com>]

I'm looking for some information and hopefully documentation regarding 
Tipping Point devices (400 series) and 802.1q.

I currently have a Tipping Point 400 device tapped to an 802.1q trunk 
from a Cisco 3750 switch with multiple DMZ/VLANs. The configuration is 
supposed to have been validated as legit, but the older documentation 
did not identify the link type from the Cisco switch. But we still can't 
validate that the TP device is seeing the actual IP traffic and not the 
" 802.1q gobbledeygook."

I have tried to contact Tippint Point, but without support contract 
information I haven't been able to get much. I've searched Tipping 
Point's site and the only information I can find regarding 802.1q (or 
"trunking" or "LACP") is in regards to the X505--nothing on the 400. 
Likewise, googling doesn't turn up much and none of my primary contacts 
have been able to definitively respond to the question. At the moment, 
I'm operating off the default assumption that if it isn't explicitly 
stated, then it isn't supported.

Thanks in advance for any information that anyone can provide.

--
Becca Kastl

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
------------------------------------------------------------------------