[Snort-users] Re: Snort on a switched network ?

Fyodor fygrave at ...121...
Tue Mar 13 20:05:44 EST 2001


On Wed, Mar 07, 2001 at 03:37:53PM -0500, Andrew.Zielinski at ...1252... wrote:
> I'm running Snort on a switched network, previously I tested it on a net
> with a dumb hub and it worked fine. On the switched net, which is a DMZ
> Rail, I'm mirroring all the port. Problem is I only seem to be getting all
> the traffic coming out of the mirrored port, which I don't care about. I'm
> not picking up traffic going into the ports, has anyone ever seen this
> problem?
> 

very likely problem with your switch then.. what kind of hardware is that? 
-- 
http://www.notlsd.net
PGP fingerprint = 56DD 1511 DDDA 56D7 99C7  B288 5CE5 A713 0969 A4D1




More information about the Snort-users mailing list