[Snort-users] Can anyone recommend an ethernet tap?

Sp0ng3b0b sp0ng3b0b at ...9090...
Wed Oct 6 06:54:36 EDT 2004


Martin Olsson wrote:
> I want to buy an ethernet tap where snort will listen.
> A----Tap----B
>       |
>    Sniffer
> Criteria:
> * 100Mbps
> * full duplex (not a hub then)
> * the throughput between A and B should be almost the same as using a
>   X-patch cable
> * the sniffer port should see both directions of the traffic (if A and B
>   generate more than 100Mbps together, start dropping packets), I do not
>   want two sniffer ports where one see A->B and the other B->A, I just
>   want one port that mirror B<->B
> Maybe the sniffer-port could be 1Gbps, then packets wouldn't have to be
> dropped, but I guess that the price of a gigabit tap is far more than a
> 100Mbps one...
> I do not want to use a hub.
> I do not want to use a switch with port mirroring support.
> What product(s) should I look for? Not too expensive please. :-)
> /Martin
> -------------------------------------------------------
> This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
> Use IT products in your business? Tell us what you think of them. Give us
> Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
> http://productguide.itmanagersjournal.com/guidepromo.tmpl
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users

More information about the Snort-users mailing list