Snort mailing list archives
Re: Cisco Catalyst - SNORT
From: Jeff Nathan <jeff () snort org>
Date: Fri, 27 Jun 2003 16:23:10 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --On Friday, June 27, 2003 7:34 -0400 Gary Flynn <flynngn () jmu edu> wrote:
I'm not saying the switch works this way but if the packets are on a bus and configuring a span port just means telling the port to grab anything on the bus, it would seem there would be no performance hit.
Grabbing those frames and sending them out a different interface still requires I/O operations (interrupt request processing and the like). Hidden as it may be, there's always a price. EOF.
-- Gary Flynn Security Engineer - Technical Services James Madison University Please R.U.N.S.A.F.E. http://www.jmu.edu/computing/runsafe
- -Jeff - -- http://cerberus.sourcefire.com/~jeff (gpg key available) Great spirits have always encountered violent opposition from mediocre minds. - - Albert Einstein -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (Darwin) iD8DBQE+/NHeEqr8+Gkj0/0RAiAVAJ0TqCbb/4ZaTCrA3P6UOzXO14aBnQCfei+a Ez7l4RxzeObF2ipc/aQkllg= =OOuU -----END PGP SIGNATURE----- ------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Re: Cisco Catalyst - SNORT, (continued)
- Re: Cisco Catalyst - SNORT Scott Fringer (Jun 23)
- RE: Cisco Catalyst - SNORT Falvo, Jose Luis - (Arg) (Jun 23)
- RE: Cisco Catalyst - SNORT Tinsley Paul (Jun 23)
- RE: Cisco Catalyst - SNORT twig les (Jun 23)
- RE: Cisco Catalyst - SNORT shannong (Jun 24)
- RE: Cisco Catalyst - SNORT Jeff Nathan (Jun 26)
- snort + 802.11 management frames ... Jon Baer (Jun 26)
- Re: Cisco Catalyst - SNORT Gary Flynn (Jun 27)
- Re: Cisco Catalyst - SNORT Rich Adamson (Jun 27)
- Re[2]: Cisco Catalyst - SNORT Lukasz Bromirski (Jun 27)
- Re: Cisco Catalyst - SNORT Jeff Nathan (Jun 27)
- Foundry performance? (was "Re: Cisco Catalyst - SNORT") twig les (Jun 27)
- Re: Foundry performance? (was "Re: Cisco Catalyst - SNORT") Roy S. Rapoport (Jun 28)
- OT: Re: Foundry performance? Chris Green (Jun 30)
- RE: Cisco Catalyst - SNORT twig les (Jun 23)
- Re: Cisco Catalyst - SNORT Gary Flynn (Jun 27)
- Re: Cisco Catalyst - SNORT Jeff Nathan (Jun 27)
- RE: Cisco Catalyst - SNORT Mike Feetham (Jun 27)