[Snort-users] Switched hub

Jose Maria Lopez jkerouac at ...12346...
Wed Sep 15 10:26:56 EDT 2004


El mié, 15 de 09 de 2004 a las 09:17, patrick.marquetecken at ...1187...
escribió:
> Hi,
> 
> In about 1 month we are going to switch from a DMZ hub to a switch network. Wat is the best way for following the network traffic, as normal its not possible to view other ports with a switch network.
> 
> TIA
> Patrick

You should have a mirror port (or span port) that aggregates all
the network traffic.

-- 
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac at ...12346...
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"





More information about the Snort-users mailing list