Snort mailing list archives
Re: Speaking of spaning ports on a switch...
From: "Jon Baer" <security () jonbaer net>
Date: Sun, 3 Aug 2003 11:33:24 -0700
offhand, anyone have any idea how much this tap costs? - jon pgp key: http://www.jonbaer.net/jonbaer.asc fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47
http://www.netoptics.com/10-100-tap.html A TAP device will strip the Tx from each direction and deliver it to you
in
two separate channels. Snort and most other nIDS do not have the native capability to re-combine the separate Tx channels. You would need to take care of this for the sensor using what's called Adapter Teaming or Adapter Bonding. After teaming two NIC's together you will have a Virtual
Interface.
You can then monitor the Virtual Interface with snort.
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Speaking of spaning ports on a switch... support (Aug 01)
- Re: Speaking of spaning ports on a switch... Scot Scot (Aug 02)
- <Possible follow-ups>
- FW: Speaking of spaning ports on a switch... support (Aug 02)
- Re: Speaking of spaning ports on a switch... Scot Scot (Aug 03)
- Re: Speaking of spaning ports on a switch... Jon Baer (Aug 03)
- Re: Speaking of spaning ports on a switch... Scot Scot (Aug 03)