[Snort-users] Port mirroring

Matt Kettler mkettler at ...4108...
Fri May 21 10:44:14 EDT 2004

At 10:04 AM 5/21/2004, Boswell, Richard wrote:
>Does anyone know whether SonicWALL appliances will perform port-mirroring?

Sonicwalls devices are firewalls, not switches. Generally port mirroring is 
done as a layer 2 operation in hardware. Firewalls generally don't have 
hardware layer2 switching between ports, and would have to do the mirror in 
software, thus this feature is not common in firewall devices.

AFAIK, none of the Cisco PIX, Cisco IOS, netscreen firewall, sonicwall or 
checkpoint firewall products support port mirroring.

Look for a mangaged ethernet switch, that's where you'll usually find 
mirroring capabilities.

More information about the Snort-users mailing list