[Snort-users] Snort with SingleStream device?
eric.hines at ...8860...
Tue Feb 1 07:13:50 EST 2005
We are more partial to Net Optics, we've had tremendous success with them,
recently deploying over 23 Snort IDS agents with the Net Optics 10/100 Port
Aggregator. Net Optics out of all the taps we've reviewed are the only ones
that offer circuit-level passive tapping that provides zero delay when the
power is cut. We pulled the power cord on the tap and experienced absolutely
no packet loss or delay while running Snort in sniffer mode.
The Port Aggregators allow you to no longer have to do port bonding in Linux
on a Snort sensor, eliminating having to waste a second NIC. The Port Aggs
bond the A and B ports together in to a single monitoring port on the Tap.
Eric Hines, GCIA, CISSP
CEO, President, Chairman
Applied Watch Technologies, LLC
1134 N. Main St.
Algonquin, IL 60102
Tel: (877) 262-7593 x327
Fax: (877) 262-7593
From: snort-users-admin at lists.sourceforge.net
[mailto:snort-users-admin at lists.sourceforge.net] On Behalf Of JP Garcia
Sent: Monday, January 31, 2005 11:45 AM
To: snort-users at lists.sourceforge.net
Subject: [Snort-users] Snort with SingleStream device?
Anyone have experience using Snort in with a full duplex tap like the
If so, how well did it work out for you? Thanks for the insight!
Network Advocates, Inc
E-Mail: jgarcia at ...12975...
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool
for open source databases. Create drag-&-drop reports. Save time by over
75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:
More information about the Snort-users