Snort mailing list archives

Re: question about a receive-only ethernet cable


From: Thomas Templin <templin () gnuwhv de>
Date: Tue, 1 Jul 2003 01:33:36 +0200

On Monday 30 June 2003 23:57, Frank Knobbe wrote:
On Mon, 2003-06-30 at 13:33, Scott Renna wrote:
So I've found a few links and pages with information on how to
make a Receive-Only Ethernet cable.  I followed instructions
listed on one page that said to bond wire 1 and 3 together and
wire 2 and 6 together on one end, and remove the rest of
lengths of wires 1 and 2 from the cable. I'm not having luck
at all in getting it to work.

Sounds almost like the cable in the Snort FAQ. Except that there
is a connection between 1 and 3 and 2 and 6 on one side, and a
loop back between 1 and 2 on the other. Perhaps your cable
doesn't quite represent the diagram.

Works for me on 10MB and 100MB hubs. May not work on dual-speed
hubs and definitely doesn't work on switches :)
BTW. Even if its not a common use, aren't there any sniffing cables 
ready to use which can be ordered?
For me its always a hassle to do this job. All of you who are 100% 
red green blind will know what Im talking about :o)

Bye,
Thomas



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: