IDS mailing list archives

Re: port mirroring for two targets


From: Dogten <dogten () d3fcon org>
Date: Wed, 18 Jul 2007 20:49:25 -0500

JGolian () seznam cz wrote:
I need port mirrored data for snort and for ntop.

How to make it? Is possible to create two mirroring ports?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more.
------------------------------------------------------------------------




Sure, via switch configuration, multiport tap, or a dumb hub.

--
-dogten
____________________________________
omnia dicta fortiora si dicta Latina


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more.
------------------------------------------------------------------------


Current thread: