[Snort-users] FW: Passive Ether Tap

Matt Nelson mnelson at ...11663...
Fri Apr 16 16:41:27 EDT 2004

Sorry.missed other subscribers previous post.  Please disregard.

> ______________________________________________ 
> To:	'snort-users at lists.sourceforge.net'
> Subject:	Passive Ether Tap
	>Hello all, I have made a passive ethernet tap.   What effect will
this have on my Snort analysis?  Will SNort be able to reassemble the both
streams or will using 2 NICs and separate Snort >processes be needed?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20040416/c80d48ef/attachment.html>

More information about the Snort-users mailing list