Snort mailing list archives

Re: Tap problem.


From: Frank Knobbe <frank () knobbe us>
Date: Sat, 19 Jun 2004 18:08:11 -0500

On Sat, 2004-06-19 at 14:35, Paul W Halliday wrote:
I just finished building a second tap as per the instructions at
http://www.snort.org/docs/tap/. Has anyone else built one of these? and if
so do you get a link light on the NIC plugged into tap A?
I was under the impression that either A or B would carry traffic if the
device was full duplex. All I pick up it outgoing traffic.

I've been using the read-only cable for years now, but it is constructed
a bit different (see ASCII drawing in the FAQ). In order to get a link,
you have to connect pins 1 and 2 on the sniffer/snort interface.
Apparently that is not described in Michael's tap drawing. 

Go ahead and short-circuit pin 1 and 2 on both Tap A and Tap B ports
individually. That should fake a link on the sniffer card(s).

Regards,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: