RE: SPAN

[Owen Creger <OCreger () CreativeSolutions com>]

It should work on the 3500XL series.  I'm doing it on 2900XL's which are
simular.
Use the command: port monitor <interface>
 

-----Original Message-----
From: Tom Sevy [mailto:tsevy () epx com]
Sent: Monday, August 19, 2002 8:30 PM
To: snort-users () lists sourceforge net; 'twr () bellsouth net'
Subject: RE: [Snort-users] SPAN


I'm doing this with 3500xl series switches.

-----Original Message-----
From: hackerwacker [mailto:hackerwacker () cybermesa com]
Sent: Monday, August 19, 2002 6:31 PM
To: snort-users () lists sourceforge net
Subject: Re: [Snort-users] SPAN


Would need to know to model # of the switch to answer as Cisco makes lots of
"switches".

----- Original Message ----- 
From: Tim <mailto:twr () bellsouth net>  
To: Snort-list <mailto:snort-users () lists sourceforge net>  
Sent: Monday, August 19, 2002 6:34 PM
Subject: [Snort-users] SPAN

Hey ppl,
 
Quick question, will snort sensors play with monitored ports on a Cisco
10/100 switch or is placing a hub be the better way to setup the sensors?
 
Tim -- Mia/Fla