Re: port mirroring for two targets

["Andrew Hay" <andrewsmhay () gmail com>]

It depends on the make and model of the device you're trying to create
the mirrored port on.  Some devices don't allow you to create more
than one mirrored interface for a particular port.

You may also want to look at getting a network tap which would
probably allow you to monitor a particular interface with multiple
sensors.

Hope this helps.

On 18 Jul 2007 11:41:15 -0000, JGolian () seznam cz <JGolian () seznam cz> wrote:
> I need port mirrored data for snort and for ntop.
>
> How to make it? Is possible to create two mirroring ports?
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------


--
Andrew Hay
blog: https://www.andrewhay.ca
email: andrewsmhay || at || gmail.com

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw 
to learn more.
------------------------------------------------------------------------