[Snort-users] Tap question

Mike Shaw mshaw at ...3165...
Thu Jan 30 11:20:14 EST 2003

I'm evaluating a move from span ports to taps this year, and I've been 
looking at these:


It looks like in order to do this I will need two nics to effectively 
monitor a network: one for incoming packets and one for outgoing.  Is this 
correct?  (if this is covered in a prior post or FAQ, please slap me down 
and I'll look it up)


More information about the Snort-users mailing list