[Snort-users] Can anyone recommend an ethernet tap?
sp0ng3b0b at ...9090...
Wed Oct 6 06:54:36 EDT 2004
Martin Olsson wrote:
> I want to buy an ethernet tap where snort will listen.
> * 100Mbps
> * full duplex (not a hub then)
> * the throughput between A and B should be almost the same as using a
> X-patch cable
> * the sniffer port should see both directions of the traffic (if A and B
> generate more than 100Mbps together, start dropping packets), I do not
> want two sniffer ports where one see A->B and the other B->A, I just
> want one port that mirror B<->B
> Maybe the sniffer-port could be 1Gbps, then packets wouldn't have to be
> dropped, but I guess that the price of a gigabit tap is far more than a
> 100Mbps one...
> I do not want to use a hub.
> I do not want to use a switch with port mirroring support.
> What product(s) should I look for? Not too expensive please. :-)
> This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
> Use IT products in your business? Tell us what you think of them. Give us
> Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> Snort-users list archive:
More information about the Snort-users