[Snort-users] Port Mirroring

Bruce Ferrell bferrell at ...14898...
Tue Dec 6 22:43:03 EST 2016

Taps get weird.  You  *might* try openvswitch, bind the interfaces of interest to virtual ports and do your SPAN ports there

On 12/06/2016 06:43 AM, Justin Pederson wrote:
> What are you guys doing to Mirror Ports.  I was going to use my wireless router I got from the ISP but I found out last night this can not be done with it.  I do have a 2950 and 
> 2960 switch that I can setup mirroring on but you rather not have them running in my office constantly.  Any idea on what the difference between a hub and network tap will be?  
> If the network tap is the way to go any idea on some have way decent ones for a home lab?
> ------------------------------------------------------------------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today.http://sdm.link/xeonphi
> _______________________________________________
> Snort-users mailing list
> Snort-users at lists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> Please visit http://blog.snort.org to stay current on all the latest Snort news!

More information about the Snort-users mailing list