[Snort-users] switch port as network tap?
john.b.williams at ...11827...
Tue Feb 15 10:19:43 EST 2011
I need to get a SNORT system up and running quickly and have a couple questions:
1) Network taps seem very expensive. Possible stupid question: Is
there a reason why one couldn't use a "sniffer" (i.e. read-only) port
on a a Ethernet VLAN switch rather a Network Tap? Doesn't it do the
2) Is there an automated processes for updating the latest signatures?
More information about the Snort-users