[Snort-users] Need to monitor 2GB Etherchannel trunk

Jeff Coppock jcoppock1 at ...5068...
Tue Oct 4 20:19:57 EDT 2005


>Any suggestions on how to do this?

Do you mean there are 2x1Gb links?  Or, do you mean each link is Gigabit 
Ethernet at Full Duplex?

See if your switch supports port mirroring such that you can monitor the 
trunks to a separate Gig link on which you can have a Snort system.

jc

-- 
Jeff Coppock		Systems Engineer
Diggin' Debian		Admin and User




More information about the Snort-users mailing list