[Snort-users] Tap and Hub

Lee Clemens snort at ...13080...
Wed Mar 24 18:17:43 EDT 2010

Just wanted to point out that some taps do allow traffic to be injected:


-----Original Message-----
From: Eoin Miller [mailto:eoin.miller at ...14586...] 
Sent: Wednesday, March 24, 2010 2:08 PM

On 3/24/2010 4:12 PM, akos.daniel at ...14798... wrote:
> Hi,
> What is the difference between a network hub and a network tap?
> Maybe a stupid question, but is there a "gigabit hub" on the market or for
> gigabit should I look for a tap?
> (span port is not possible in my case...)
> Thanks for the info.
> Akos
Hub can't do full duplex, so it may hurt your network speed to put it in 
the loop. Plus, a device can't inject traffic into a tap like it can 
with a hub. Tap > SPAN > hub.

-- Eoin

Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
Snort-users mailing list
Snort-users at lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
Snort-users list archive:

More information about the Snort-users mailing list