Re: Tap and Hub

[Nick Moore <nmoore () sourcefire com>]

David,

That's why larger switches have the SPAN feature. In essence, it repeats the
traffic of some or all the other switch ports out a designated port for
sniffers or IDS sensors. Here's more info:

http://www.enterprisenetworkingplanet.com/nethub/article.php/3766701

http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a008015c612.shtml


Nick

On Wed, Mar 24, 2010 at 2:14 PM, D. Hofstee <hofstee () gmail com> wrote:

> ---------- Forwarded message ----------
> From: D. Hofstee <hofstee () gmail com>
> Date: Wed, Mar 24, 2010 at 8:13 PM
> Subject: Re: [Snort-users] Tap and Hub
> To: Eoin Miller <eoin.miller () trojanedbinaries com>
>
>
> well, for the sake of being curious: how do people monitor inter-server
> traffic? A tap in front of the switch doesn't do the job.
>
> bye,
>
> David
>
>
> On Wed, Mar 24, 2010 at 7:11 PM, Eoin Miller <
> eoin.miller () trojanedbinaries com> wrote:
>
> > Here is a good article/writeup about this:
> > http://www.lovemytool.com/blog/2007/08/span-ports-or-t.html
> >
> > -- Eoin
> >
> > On 3/24/2010 4:12 PM, akos.daniel () db-soft hu wrote:
> > > Hi,
> > >
> > > What is the difference between a network hub and a network tap?
> > > Maybe a stupid question, but is there a "gigabit hub" on the market or
> > for
> > > gigabit should I look for a tap?
> > > (span port is not possible in my case...)
> > > Thanks for the info.
> > >
> > > Akos
> > ------------------------------------------------------------------------------
> > > Download Intel&#174; Parallel Studio Eval
> > > Try the new software tools for yourself. Speed compiling, find bugs
> > > proactively, and fine-tune applications for parallel performance.
> > > See why Intel Parallel Studio got high marks during beta.
> > > http://p.sf.net/sfu/intel-sw-dev
> > > _______________________________________________
> > > Snort-users mailing list
> > > Snort-users () lists sourceforge net
> > > Go to this URL to change user options or unsubscribe:
> > > https://lists.sourceforge.net/lists/listinfo/snort-users
> > > Snort-users list archive:
> > > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> >
> > ------------------------------------------------------------------------------
> > Download Intel&#174; Parallel Studio Eval
> > Try the new software tools for yourself. Speed compiling, find bugs
> > proactively, and fine-tune applications for parallel performance.
> > See why Intel Parallel Studio got high marks during beta.
> > http://p.sf.net/sfu/intel-sw-dev
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users<https://lists.sourceforge.net/lists/listinfo/snort-users%0ASnort-users>list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>
>
>
> ------------------------------------------------------------------------------
> Download Intel&#174; Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users



-- 
Nick Moore, SFCE, CISSP, CISA
Sr. Systems Engineer
Voice 708-336-9041
Email nick.moore () sourcefire com
IM    nickgmoore (Yahoo)
      nickgmoore38 (AIM)

   ,,_
  o"  )~   Sourcefire - The Creators of Snort
   ''''

www.sourcefire.com         www.snort.org

------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users