Re: Ethernet Tap

[Matt Kettler <mkettler () evi-inc com>]

At 06:03 PM 8/13/2004, TKaroutsos () bcsc bc ca wrote:
> Thanks. Any idea on how many ports can be spanned to a single port on the
> Cisco switch? Could not find this info at Cisco's site.

It's somewhat complex, see the "monitor session" command in the command 
reference:

http://www.cisco.com/en/US/products/hw/switches/ps628/products_command_reference_chapter09186a0080150b7b.html#2921813

In short, you can have two span sessions..
        Each span session can have only one output port.
        Each span session can monitor the received traffic on as many 
ports as it likes
        Each span session can monitor the transmitted traffic of only ONE 
port.

Thus you can only monitor one port if you want to monitor it full-duplex 
(tx and rx)




-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users