AW: [Snort-users] Taps

Poppi, Sandro Sandro.Poppi at ...3316...
Wed Aug 25 06:36:23 EDT 2004


Paul,

maybe you should use a crossover cable instead of a direct one. I had to use
it when using an NG tap but haven't verified with the mentioned passive tap.

Just my 2 cents.

HTH,
Sandro
> 
> 
> I am currently using this tap:
> 
> http://www.snort.org/docs/tap/
> 
> This tap sits between a cisco catalyst switch and a 2600 router. The
> link is full duplex and I am only capturing traffic on one of the
> ports on the tap. I have tried a cable in the other port and I dont
> get a link light. I have double checked the construction and
> everything seems to be as per the documentation. Has anyone else
> managed to get both streams with the use of this tap?
> 
> Also, looking at:
> 
> http://www.snort.org/docs/100Mb_tapping1.pdf
> 
> Would this be the better way to go? Is the item in the top left of
> this picture the same as the above tap? And the use of the switch is
> simply to combine the two streams?
> 
> I have looked at purchasing a real tap from Securicore Inc that
> combines both streams into one on its own but they want 1300 CAD for
> one of these which is not really in our budget atm.
> 
> What, if any, are my other options? -or- What have I missed 
> on the construction.
> 
> Thanks.
> 
> -- 
> _________________
> Paul Halliday
> http://dp.penix.org
> 
> "Diplomacy is the art of saying "Nice doggie!" till you can 
> find a rock."
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by Shop4tech.com-Lowest price on Blank Media
> 100pk Sonic DVD-R 4x for only $29 -100pk Sonic DVD+R for only $33
> Save 50% off Retail on Ink & Toner - Free Shipping and Free Gift.
> http://www.shop4tech.com/z/Inkjet_Cartridges/9_108_r285
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
> 




More information about the Snort-users mailing list