[Snort-users] SPAN port packet related

Faiz Ahmad Shuja faizshuja at ...5849...
Wed Aug 13 15:18:57 EDT 2003

A copy of all the traffic on port 0/11 and 0/12 will be sent on port
0/10 by switch. It will send "everything" coming on these ports.


-----Original Message-----
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of Ahmad
Masood Shah
Sent: Wednesday, August 13, 2003 12:48 PM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] SPAN port packet related

I'm using Catalyst 3500 to mirror traffic for port 0/11 0/12. SPAN port
is 0/10. my 0/11 port data is upto 1 Mbps. My question is that when
switch will send packet information to my IDS via SPAN port  it will
redirect all traffic or it will send simple packet header to IDS sensor.


Best Regs,
Masood Ahmad Shah

This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users archive:
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3275 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20030813/c3afc77d/attachment.bin>

More information about the Snort-users mailing list