Snort mailing list archives

Re: Need to monitor 2GB Etherchannel trunk


From: Joe S <js.lists () gmail com>
Date: Tue, 04 Oct 2005 12:59:53 -0700

eric wrote:
On Tue, 2005-10-04 at 12:33:01 -0700, Joe S proclaimed...


Any suggestions on how to do this?


OpenBSD 3.8 will support trunk interfaces. You can then just monitor the
trunk interface. We do that, but with a bridge interface. So basically, in
our config, we monitor bridge0.


Seems like that would work. Unfortunately, my taps are 1gig taps. The etherchannel links are 2gig.

I dont know much about etherchannel. Won't there be some sort of media mismatch?


-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: