Snort mailing list archives
Re: Tap problem.
From: Paul W Halliday <paulh () dove penix org>
Date: Sat, 19 Jun 2004 20:07:30 -0400 (EDT)
On Sat, 19 Jun 2004, Frank Knobbe wrote:
On Sat, 2004-06-19 at 14:35, Paul W Halliday wrote:I just finished building a second tap as per the instructions at http://www.snort.org/docs/tap/. Has anyone else built one of these? and if so do you get a link light on the NIC plugged into tap A? I was under the impression that either A or B would carry traffic if the device was full duplex. All I pick up it outgoing traffic.I've been using the read-only cable for years now, but it is constructed a bit different (see ASCII drawing in the FAQ). In order to get a link, you have to connect pins 1 and 2 on the sniffer/snort interface. Apparently that is not described in Michael's tap drawing. Go ahead and short-circuit pin 1 and 2 on both Tap A and Tap B ports individually. That should fake a link on the sniffer card(s).
Exactly what I was looking for. Thanks.
Regards, Frank
------------------------------------------------------- This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Tap problem. Paul W Halliday (Jun 19)
- Re: Tap problem. Frank Knobbe (Jun 19)
- Re: Tap problem. Paul W Halliday (Jun 19)
- Re: Tap problem. Frank Knobbe (Jun 19)