Re: Speaking of spaning ports on a switch...

["Scot Scot" <scotw () hotmail com>]

This may not be the most cost effective recomendation, but regarding
reliability I would recommend the following:

Cisco Catalyst® 2950-12
They run between $600 / $650-ish

You may be better off going with a $400-ish TAP solution.

Just my 2.0134 cents worth (tax included)
Scot


----- Original Message ----- 
From: <support () nps-dc org>
To: <snort-users () lists sourceforge net>
Sent: Friday, August 01, 2003 9:41 PM
Subject: [Snort-users] Speaking of spaning ports on a switch...


Speaking of spaning ports on a switch...

What's the most cost effective 8-16 port switch that supports
"spanning/mirrorin" to one port?  (100mbit is fine)

Thanks,

Fernando

-----Original Message-----
From: snort-users-admin () lists sourceforge net
[mailto:snort-users-admin () lists sourceforge net] On Behalf Of twig les
Sent: Friday, August 01, 2003 2:05 PM
To: /dev/null; Snort Users
Subject: Re: [Snort-users] cheap monitoring, not OT


This is not OT, I hope this list doesn't get uptight to the point that
people are scared to ask questions.

If you have a Snort box currently running the cheapest thing to do would be
to add another interface and plug it into the switch and mirror traffic to
that port.  If you can't mirror then yes, a 10Mb hub would be very cheap.  A
very quick look at a site I like has a 16-port 10Mb hub for $30 so I know
they are still in
circulation: http://www.mypcparts.com/ethernethubs.html.

At that traffic rate you can also just grab whatever hardware is lying
around to set up a Snort box if you don't have one.

--- /dev/null <dev.null () BeginThread com> wrote:
> > OOOOOOOOOOOOOOTTTTTTTTTTTTTTTTTTT
>
> How is this OT?  I'm wanting to set up a snort sensor to monitor
> traffic and am asking the cheapest route to go.
>
>
>
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available
> now.
> Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users


=====
-----------------------------------------------------------
Emo is what happens when the glee club goes punk.
-----------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data
Reports, E-commerce, Portals, and Forums are available now. Download today
and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=ort-users


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users