Snort mailing list archives

Re: real basic starter rules


From: Rich Adamson <radamson () routers com>
Date: Sat, 27 Apr 2002 09:48:05 -0600

Watch the Netgear stuff closely. It might not say "switch" anywhere, but
some of their boxes essentially perform the switch function under some
circumstances. We've been using a Netgear DS104 hub for a couple years
as an access mechanism to perform professional protocol analysis (sniffing)
and other network services for clients in 40+ states. When the ports on
this "hub" are running at the _same_ speed (10 or 100), it performs as
a hub. If the port speeds differ, it performs as a switch without any
shadow of a doubt. Proven time and again.

Same for some of the 3Com hubs.

It turned out (I think this is why) that my dsl/router to which all
boxes were connected is also a switch.  So, I went and bought a simple
hub.  NETGEAR 108 (8 ports), and at least the guy in comp.usa said it
isn't switched.  And the specs say nothing about switch.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: