[Snort-users] Span/Snoop ports...

Ulric Eriksson ulric at ...13186...
Fri Mar 18 06:15:55 EST 2005


On Fri, 18 Mar 2005, Marc Hering wrote:

> Hey Guys,
> I just deployed a Snort box to one of our data centers...and I ran into
> a bit of a snafu.  We have a 2948G-L3 switch and want to snort on it.
> The problem is that a L3 switch doesn't suppprt a snoop port...Has
> anyone found a way around this?

Depending on the IOS version, you should be able to use the "port 
monitor" or "monitor session" commands.

Ulric




More information about the Snort-users mailing list