Re: [Snort-users] Span/Snoop ports...

--==_Exmh_-2011467702P
Content-Type: text/plain; charset=us-ascii


> I just deployed a Snort box to one of our data centers...and I ran into
> a bit of a snafu. We have a 2948G-L3 switch and want to snort on it.
> The problem is that a L3 switch doesn't suppprt a snoop port...Has
> anyone found a way around this?

Depending upon your setup (and budget) a network tap might work.

We use them here with our portable IDS which is temporarily deployed
in client networks and we can't always know what type of switch setup
they might have.



Skip




--
Dr. Everett (Skip) Carter Phone: 831-641-0645 FAX: 831-641-0647
Taygeta Network Security Services email: skip@taygeta.net
1340 Munras Ave., Suite 314 WWW: http://www.taygeta.net/
Monterey, CA. 93940












--==_Exmh_-2011467702P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8
Comment: Exmh version 2.6.3 04/04/2003

iQEVAwUBQjtffg55mXCLeJ33AQH3vQgAlcx7IPWoAHYKZVk7r2 rzzpH8bDG2MrCT
Xvc8jSh/0LVnv8G/OUMnEKWkwkdOL0sGMVuiMrDi33o3EPEYS+vMUw0vAwnyEJCg
3B3g7tKk/9ikNcwo6ODn4dCsfkQUV7HnoYDjJm/9i4CIaM5NHE8IdUJ81XpTGyzn
k51Mt4XwPmkShkGoSKWK0pcHjVzIqrlj+QO+Y02C+M69XiCwG7 8lWXwzRcc1x/Bh
rKG598HvWmSMTUTy2A0Or7pFFN3sB34WvtVQ3CtcDqKLDe/SsprESIORWJ90ToeI
YjkIoLwBXKD1d1paLrJ+aEweV5PdQ1sv+D/C/1Sm/hp+kqgcYsBaaA==
=oUkL
-----END PGP SIGNATURE-----

--==_Exmh_-2011467702P--


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users