Snort mailing list archives

Re: Can anyone recommend an ethernet tap?


From: "Scot Wiedenfeld" <scotw () charter net>
Date: Wed, 6 Oct 2004 09:56:55 -0500

Martin Olsson <elof () sentor se> wrote:

I want to buy an ethernet tap where snort will listen.

A----Tap----B
      |
   Sniffer

Criteria:
* 100Mbps
* full duplex (not a hub then)
* the throughput between A and B should be almost the same as using a
  X-patch cable
* the sniffer port should see both directions of the traffic (if A and B
  generate more than 100Mbps together, start dropping packets), I do not
  want two sniffer ports where one see A->B and the other B->A, I just
  want one port that mirror B<->B

If you're looking for more options:

http://www.intrusion.com/products/taps.asp

Scot Wiedenfeld
Just my 2.0134 cents worth (tax included)





-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: