[Snort-users] Switched hub

Jose Maria Lopez jkerouac at ...12346...
Wed Sep 15 10:26:56 EDT 2004

El mié, 15 de 09 de 2004 a las 09:17, patrick.marquetecken at ...1187...
> Hi,
> In about 1 month we are going to switch from a DMZ hub to a switch network. Wat is the best way for following the network traffic, as normal its not possible to view other ports with a switch network.
> Patrick

You should have a mirror port (or span port) that aggregates all
the network traffic.

Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac at ...12346...
bgSEC Seguridad y Consultoria de Sistemas Informaticos

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"

More information about the Snort-users mailing list