Snort mailing list archives
Port Mirroring
From: "Bruno Benchimol a.k.a. Misty MSt" <mistymst () ig com br>
Date: Thu, 30 Jan 2003 23:20:12 -0300
I've got a little problem here, i've got a 3com superstack II (10/100 mbits) Switch. i am running snort as a network intrusion detect system, but i couldnt do port morrioring so its just a host IDS. I did a telnet to the Switch and looked up on the ports configs. i didnt find anything like ~Mirroring~ , although i found resilence would be something similar since i could set up resilence on a port to another so i though it could be port mirroring but it wasnt it just Disabled the traffic on the specified port... Like my Router is on the 8th Port and my NIDS on 11th , so i said: Resilence on port 8th to port 11th (he called it on standby port and 8th of active port) but it blowed up everything. Traffic Stopped flowing. Any of guys could help on it? or does this switch got no port morring at all? Btw, i already asked for the manuals and looked at 3com.com but hell :( i couldnt find nothing. Thanks in Advance, BB. ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Port Mirroring Bruno Benchimol a.k.a. Misty MSt (Jan 30)
- Re: Port Mirroring Rich Adamson (Jan 30)
- Re: Port Mirroring Glenn Forbes Fleming Larratt (Jan 30)
- Re: Port Mirroring Rich Adamson (Jan 30)