[Snort-users] Went to switched environment

Cressall, Erik ecressall at ...1094...
Fri Jan 5 14:45:13 EST 2001

Most switches worth their weight can mirror ports,

Just ask your Network Person to set it up for your snort box 
to have all ports mirrored to your 'snorting' port.

--faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--
Q: I'm on a switched network, can I still use Snort?

A: This depends on the type of switch you have.  If it can mirror traffic,
   can direct it to the port that your Snort box is on.
--faq-- --snort-- --faq-- --snort-- --faq-- --snort-- --faq--

-----Original Message-----
From: Ronny Huybrechts [mailto:ronny at ...1040...]
Sent: Friday, January 05, 2001 11:19 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Went to switched environment

Although I was very, very happy with Snort,
earlier this week our company replaced
all hubs by HP switches rendering my Snort-machine
useless.. :-((

What's the easiest way to make it detecting packets again ?
Putting a HUB between our webservers and my Linux ?
But I doubt the webmasters will like that...

Snortless greetings..

Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:

More information about the Snort-users mailing list