Snort mailing list archives

Re: Speaking of spaning ports on a switch...


From: "Jon Baer" <security () jonbaer net>
Date: Sun, 3 Aug 2003 11:33:24 -0700

offhand, anyone have any idea how much this tap costs?

- jon

pgp key: http://www.jonbaer.net/jonbaer.asc
fingerprint: F438 A47E C45E 8B27 F68C 1F9B 41DB DB8B 9A0C AF47


http://www.netoptics.com/10-100-tap.html

A TAP device will strip the Tx from each direction and deliver it to you
in
two separate channels. Snort and most other nIDS do not have the native
capability to re-combine the separate Tx channels. You would need to take
care of this for the sensor using what's called Adapter Teaming or Adapter
Bonding. After teaming two NIC's together you will have a Virtual
Interface.
You can then monitor the Virtual Interface with snort.



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: