RE: [Snort-users] Snort readng across switches?

Cascaded has nothing to do with port
spanning/mirroring. THe only traffic you're gonna see
on a switch is traffic destined for you port only,
plus the broadcasts. If you need to see traffic going
to/from a central router, use the switch to mirror the
router's port....

Cheese!

Marc

>Message: 2
>Date: Mon, 26 Jan 2004 11:44:23 -0500 (GMT-05:00)
>From: "M. Morgan" <mikemorgan@mindspring.com>
>Reply-To: "M. Morgan" <mikemorgan@mindspring.com>

>To: snort-users@lists.sourceforge.net
>Subject: [Snort-users] Snort readng across switches?

>Hello all,
> I've noticed that my snort sensors, plugged into
>different places on cascaded cisco 2600 series
>switches are getting different readings. This leads
>me to believe that snort is only sensing traffic on
>the switch it is plugged into. Does it read across
>cascaded switches or must each switch have a snort
>node sniffing it?

>Thanks,
>Michael


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/


-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users