This is a discussion on snort bandwidth within the Snort forums, part of the System Security and Security Related category; All I had a question regarding sensor deployment. I have about 30-40 servers on a vlan that i want ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
All
I had a question regarding sensor deployment. I have about 30-40 servers on a vlan that i want to monitor traffic to and I have setup a span port to which the snort sensor is connected. The span port port mirrors the entire traffic on that VLAN where the 30-40 svrs are connected. I am wondering if the sensore port is going to see all the traffic on that vlan because the port is 100Mbps b/w. Is thre a better way to do this so that the sw port whr the senosor is connected sees the entire traffic on that plan let me know your suggestions!!! Thanks RK |