[Snort-users] Port Aggregator Tap alternatives for snort sensor

This is a discussion on [Snort-users] Port Aggregator Tap alternatives for snort sensor within the Snort forums, part of the System Security and Security Related category; I've been using a Cisco 2950 for single tap I have setup and it has worked fine to date. ! ...


Go Back   Usenet Forums > System Security and Security Related > Snort

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 03-04-2008
Stephen Reese
 
Posts: n/a
Default [Snort-users] Port Aggregator Tap alternatives for snort sensor

I've been using a Cisco 2950 for single tap I have setup and it has
worked fine to date.

!
interface FastEthernet0/1
switchport access vlan 100
duplex full
!
interface FastEthernet0/2
switchport access vlan 100
duplex full
!
!
monitor session 1 source interface Fa0/1
monitor session 1 destination interface Fa0/3

Port one is the internet source, port two is to my routing device and
three is to my sensor.

I would like to setup some more taps without having to run more
switches. An alternative is to purchase a tap still (around $300) or
making one from scratch
(http://www.altsec.info/passive-network-tap.html) but I would prefer
not to have to deal with bonding interfaces. I was considering another
2950 switch (still cost around $250 used) but I figure there has got
to be a better solution? A port aggregator seems to be out of the
question since they seem to run around $1000...

Any recommendations? Thanks.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 09:34 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0