Re: Catalyst 3500 + snort

[Erek Adams <erek () snort org>]

On Mon, 11 Aug 2003, Ahmad Masood Shah wrote:

> I'm using snort as NIDS. I have Cisco Catalyst 3500 Series XL. I want to use
> one port of this switch as traffic mirroring. I mean to say SPAN post. now
> question becomes is Cisco Catalyst 3500 support things which I required. If
> yes then please let me know how can I do that. save my time to search goolge
> etc for this :)

*sigh*

http://www.google.com/search?hl=en&ie=ISO-8859-1&q=%22catalyst+3500%22+SPAN

Hrm....  Lets see....  The first link points to Cisco's site for the
configuration manual.

http://www.cisco.com/en/US/products/hw/switches/ps637/products_configuration_guide_chapter09186a008007e838.html

And then, just right down the page is "Configuring SPAN".

http://www.cisco.com/en/US/products/hw/switches/ps637/products_configuration_guide_chapter09186a008007e838.html#xtocid22

And three penalty drinks [0].  :)

-----
Erek Adams

   "When things get weird, the weird turn pro."   H.S. Thompson


[0]     http://www.theadamsfamily.net/~erek/snort/drinking_game.txt


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users