Taps

[Paul Halliday <paul.halliday () gmail com>]

I am currently using this tap:

http://www.snort.org/docs/tap/

This tap sits between a cisco catalyst switch and a 2600 router. The
link is full duplex and I am only capturing traffic on one of the
ports on the tap. I have tried a cable in the other port and I dont
get a link light. I have double checked the construction and
everything seems to be as per the documentation. Has anyone else
managed to get both streams with the use of this tap?

Also, looking at:

http://www.snort.org/docs/100Mb_tapping1.pdf

Would this be the better way to go? Is the item in the top left of
this picture the same as the above tap? And the use of the switch is
simply to combine the two streams?

I have looked at purchasing a real tap from Securicore Inc that
combines both streams into one on its own but they want 1300 CAD for
one of these which is not really in our budget atm.

What, if any, are my other options? -or- What have I missed on the construction.

Thanks.

-- 
_________________
Paul Halliday
http://dp.penix.org

"Diplomacy is the art of saying "Nice doggie!" till you can find a rock."


-------------------------------------------------------
SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users