[Snort-users] switch port as network tap?

John Williams john.b.williams at ...11827...
Tue Feb 15 10:19:43 EST 2011


I need to get a SNORT system up and running quickly and have a couple questions:

1) Network taps seem very expensive. Possible stupid question:  Is
there a reason why one couldn't use a "sniffer" (i.e. read-only) port
on a a Ethernet VLAN switch rather a Network Tap?  Doesn't it do the
same thing?

2) Is there an automated processes for updating the latest signatures?

Thank you!




More information about the Snort-users mailing list