[Snort-users] When is a hub not a hub? (AuthReply)

Ryan Russell ryan at ...35...
Tue Jun 5 20:15:55 EDT 2001


On Tue, 5 Jun 2001, Jonathan G. Lampe wrote:

> The Netgear DS108 hub ($70?) is an auto-sensing, repeating hub and works
> great with SNORT.

Just in case someone else misinterprets your statements...

the DS line of hubs from Netgear are Dual Speed, that is they have the two
repeated channels, 100 and 10.  If, as in your situation, your machines
are all 100 (or even all 10) they you'll be fine with snort.

While I'm on the topic, and looking at one... the FS line of switches from
Netgear (such as the FS108 on the floor here..) are fully switched, and
will cause problems for Snort trying to monitor other machines on it.

				Ryan





More information about the Snort-users mailing list