[Snort-users] A question about taps

Eric Hines eric.hines at ...8860...
Fri Sep 16 08:19:04 EDT 2005


Joel's right... you could call a $5.00 hub a Tap too :)



On Fri, 2005-09-16 at 10:16 -0400, Joel Esler wrote:
> Are you sure it's a tap?  "it does exactly what a tap should do and  
> outputs all traffic it receives
> > on any of the 3 ports to all the other ports."  -- Sounds like a  
> > hub to me.
> 
> Joel Esler
> 
> On Sep 16, 2005, at 9:45 AM, Brett, Gary wrote:
> 
> > Hi there
> >
> > Just a quick question, I have in my possession a simple little  
> > plastic tap
> > (basically a little adapter type thing that has 3 RJ48 ports on it,  
> > it is
> > not a powered device just a little internally wired adapter). After  
> > testing
> > it, it does exactly what a tap should do and outputs all traffic it  
> > receives
> > on any of the 3 ports to all the other ports.
> >
> > My question is this, from reading snort mailing list archives and  
> > FAQ's,
> > people are suggesting that one should invest in a more complex,  
> > powered unit
> > e.g. Shomiti, Finisar and Netoptics etc costing many hundreds of  
> > dollars in
> > some cases. I would just like to know why my little plastic $5  
> > gizmo is not
> > on that list of recommended items ? Is there something my gizmo  
> > does or does
> > not do that makes it a bad choice for a SNORT NIDS (even in my  
> > small test
> > environment). I would really like to know
> >
> >
> > Any help on this would be greatly appreciated
> > Gary
> >
> >
> > -------------------------------------------------------
> > SF.Net email is sponsored by:
> > Tame your development challenges with Apache's Geronimo App Server.  
> > Download
> > it for free - -and be entered to win a 42" plasma tv or your very own
> > Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users at lists.sourceforge.net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://www.geocrawler.com/redir-sf.php3?list=snort-users
> >
> >
> 
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users





More information about the Snort-users mailing list