[Snort-users] Snort and acidcenter

Rich Adamson radamson at ...2127...
Wed Jan 1 10:46:30 EST 2003


> i have a netgear dualspead 10/100 hub... 
> are you telling me this wont work ?

I use the Netgear DS104 dual speed hub when professionally
evaluating networks. It works fine for sniffing, snort, etc,
"except" when equipment attached to the hub are operating at
different speeds. If you statically define the interface
speed (for each attached device) at the exact same speed for
all devices, the hub will work fine.

However, if one interface is operating at 100 megabits (as
an example) and others are at 10 megabit, there is a very high
probability the hub will start functioning as a switch and you
won't see packets passing between interfaces as expected.





More information about the Snort-users mailing list