[Snort-users] Anyone know of a good switch for snorting?
erek at ...577...
Thu Sep 20 14:34:02 EDT 2001
On Thu, 20 Sep 2001, Jeff Anderson wrote:
> Snort has been working great so far, on the outside of my firewall. I'm
> logging to a central mysql db and using demarc for monitoring. Now I'd like
> to start monitoring the internal network, except that our switch doesn't
> have a mirror port. Can anyone suggest a good 16-port 100Mbps switch, that
> has a mirror port for a snort sensor? Feel free to respond off the list if
> this has been discussed before. Thanks in advance,
You've really got another option:: Shomiti Taps. Might be a bit less cash
than a good switch.
Switch suggestions: Cisco 2924. I don't think you can beat it at the lower
end. If you're doing Data Center level stuff, look at a 6509 series. Or at
least that what my wife, the network geek, tells me. :-)
More information about the Snort-users