[Snort-users] Tap question

Mike Shaw mshaw at ...3165...
Thu Jan 30 11:20:14 EST 2003


I'm evaluating a move from span ports to taps this year, and I've been 
looking at these:

http://www.netoptics.com/10-100-tap.html

It looks like in order to do this I will need two nics to effectively 
monitor a network: one for incoming packets and one for outgoing.  Is this 
correct?  (if this is covered in a prior post or FAQ, please slap me down 
and I'll look it up)

-Mike





More information about the Snort-users mailing list