Snort mailing list archives

Re: Port Mirroring


From: Bruce Ferrell <bferrell () baywinds org>
Date: Tue, 6 Dec 2016 19:43:03 -0800

Taps get weird.  You  *might* try openvswitch, bind the interfaces of interest to virtual ports and do your SPAN ports 
there

On 12/06/2016 06:43 AM, Justin Pederson wrote:
What are you guys doing to Mirror Ports.  I was going to use my wireless router I got from the ISP but I found out 
last night this can not be done with it.  I do have a 2950 and 
2960 switch that I can setup mirroring on but you rather not have them running in my office constantly.  Any idea on 
what the difference between a hub and network tap will be?  
If the network tap is the way to go any idea on some have way decent ones for a home lab?


------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!



------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!


Current thread: