[Snort-users] Passive Tap Help

Frank Knobbe frank at ...9761...
Mon Dec 1 07:07:02 EST 2003

On Mon, 2003-12-01 at 07:50, Peters, Michael D. wrote:
> I have been examining the diagram for the passive tap. I don't really
> understand and I was hoping someone would clarify the drawing for me?

I think you are confusing the read-only cables with taps. These cables
are a cheap-mans tap. Real taps work differently. 

> Inside the tap is where I think my understanding has broken down. The
> picture seems to indicate that there is a crossover occurring on the actual
> <CABLE> which I know would not work.

Work fine for me. Please indicate which cable you are talking about. The
one in the Snort FAQ uses a feedback to fake a link (and hence can only
be used on a hub, not a switch). Other cables munge the Send signal with

Taps are different. They take the Receive line and feed it into
electronics, providing amplification, stabilization and an output driver
stage. In other words, there is electronics behind them, not just some
cable wizardy.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20031201/b62faf83/attachment.sig>

More information about the Snort-users mailing list