Snort mailing list archives

Re: Tap problem.


From: Paul W Halliday <paulh () dove penix org>
Date: Sat, 19 Jun 2004 20:07:30 -0400 (EDT)



On Sat, 19 Jun 2004, Frank Knobbe wrote:

On Sat, 2004-06-19 at 14:35, Paul W Halliday wrote:
I just finished building a second tap as per the instructions at
http://www.snort.org/docs/tap/. Has anyone else built one of these? and if
so do you get a link light on the NIC plugged into tap A?
I was under the impression that either A or B would carry traffic if the
device was full duplex. All I pick up it outgoing traffic.

I've been using the read-only cable for years now, but it is constructed
a bit different (see ASCII drawing in the FAQ). In order to get a link,
you have to connect pins 1 and 2 on the sniffer/snort interface.
Apparently that is not described in Michael's tap drawing.

Go ahead and short-circuit pin 1 and 2 on both Tap A and Tap B ports
individually. That should fake a link on the sniffer card(s).

Exactly what I was looking for. Thanks.


Regards,
Frank




-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: