Re: cheap monitoring, not OT

[twig les <twigles () yahoo com>]

This is not OT, I hope this list doesn't get uptight to the
point that people are scared to ask questions.

If you have a Snort box currently running the cheapest thing to
do would be to add another interface and plug it into the switch
and mirror traffic to that port.  If you can't mirror then yes,
a 10Mb hub would be very cheap.  A very quick look at a site I
like has a 16-port 10Mb hub for $30 so I know they are still in
circulation: http://www.mypcparts.com/ethernethubs.html.

At that traffic rate you can also just grab whatever hardware is
lying around to set up a Snort box if you don't have one.

--- /dev/null <dev.null () BeginThread com> wrote:
> > OOOOOOOOOOOOOOTTTTTTTTTTTTTTTTTTT
>
> How is this OT?  I'm wanting to set up a snort sensor to
> monitor traffic and
> am asking the cheapest route to go.
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites
> including
> Data Reports, E-commerce, Portals, and Forums are available
> now.
> Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Emo is what happens when the glee club goes punk.       
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users