Re: Port Mirroring

[Ryan Shuck <rshuck () gmail com>]

All passive taps like those listed above will not work with 1000M
connections, they will only work with 100M. There are cheap linksys
switches with port mirroring capability that can be had for under $100.

On Tue, Dec 6, 2016 at 8:00 PM, Michael Steele <michaels () winsnort com>
wrote:

> If you want to have some fun building a rather unique tap, or buy one:
>
>
>
> https://greatscottgadgets.com/throwingstar/
>
>
>
> Kindest regards,
>
> Michael...
>
>
>
> WINSNORT.com Management
>
> --
>
> ****************** Established ~ 2001 *******************
>
> *          Visit Us @ http://www.winsnort.com           *
>
> *      ~~ FREE WinIDS Snort installation guides ~~      *
>
> *               ~~ FREE support forums ~~               *
>
> * Snort: Open Source Network IDS - http://www.snort.org *
>
> *********************************************************
>
>
>
> *From:* Russ [mailto:rucombs () cisco com]
> *Sent:* Tuesday, December 6, 2016 12:17 PM
> *To:* snort-users () lists sourceforge net
> *Subject:* Re: [Snort-users] Port Mirroring
>
>
>
> These are cheap and work well:
>
>     http://www.dual-comm.com/port-mirroring-LAN_switch.htm
>
> On 12/6/16 12:08 PM, Michael Steele wrote:
>
> http://www.winsnort.com/tutorials/article/12-how-to-
> create-and-install-a-passive-ethernet-tap/
>
>
>
> Kindest regards,
>
> Michael...
>
>
>
> WINSNORT.com Management
>
> --
>
> ****************** Established ~ 2001 *******************
>
> *          Visit Us @ http://www.winsnort.com           *
>
> *      ~~ FREE WinIDS Snort installation guides ~~      *
>
> *               ~~ FREE support forums ~~               *
>
> * Snort: Open Source Network IDS - http://www.snort.org *
>
> *********************************************************
>
>
>
> *From:* Justin Pederson [mailto:jpedersm () gmail com <jpedersm () gmail com>]
> *Sent:* Tuesday, December 6, 2016 9:44 AM
> *To:* snort-users mailinglist <snort-users () lists sourceforge net>
> <snort-users () lists sourceforge net>
> *Subject:* [Snort-users] Port Mirroring
>
>
>
> What are you guys doing to Mirror Ports.  I was going to use my wireless
> router I got from the ISP but I found out last night this can not be done
> with it.  I do have a 2950 and 2960 switch that I can setup mirroring on
> but you rather not have them running in my office constantly.  Any idea on
> what the difference between a hub and network tap will be?  If the network
> tap is the way to go any idea on some have way decent ones for a home lab?
>
>
>
>
> ------------------------------------------------------------------------------
>
> Developer Access Program for Intel Xeon Phi Processors
>
> Access to Intel Xeon Phi processor-based developer platforms.
>
> With one year of Intel Parallel Studio XE.
>
> Training and support from Colfax.
>
> Order your platform today.http://sdm.link/xeonphi
>
>
>
>
> _______________________________________________
>
> Snort-users mailing list
>
> Snort-users () lists sourceforge net
>
> Go to this URL to change user options or unsubscribe:
>
> https://lists.sourceforge.net/lists/listinfo/snort-users
>
> Snort-users list archive:
>
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
>
>
> Please visit http://blog.snort.org to stay current on all the latest Snort news!
>
>
>
> ------------------------------------------------------------
> ------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today.http://sdm.link/xeonphi
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!