Re: New to Snort

[David Alonso De La Vega Tapage <delavegad () bancoaliado com>]

Hi David ..  

if you configure  one port in the switch as mirror ..   and connect in 
the snort box .. is enough .. to  catch all trafic on your net ...  but 
I'm not sure .  if you have a V lan ..  then you can catch the traffic 
of V lan A and Vlan B with one mirror port in the switch ..


David Cintron wrote:

> In order to pickup all traffic on a switch. Do I have to mirror all ports?
> I have snort running and it seems to be picking up all the traffic on my
> switch I have know vlans on this switch. Just wondering how snort picks up
> the traffic on a switch that the traffic is not ment for. Any info would
> be great.
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Does your code think in ink? 
> You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
> What are you waiting for?
> http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>  




-------------------------------------------------------
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users