OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Detmar Liesen (counter.spy_at_gmx.de)
Date: Mon Aug 05 2002 - 04:33:14 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
    majordomoiss.net Contact issforum-owneriss.net for help with any problems!
    ----------------------------------------------------------------------------

    Chan,
    this won't work if the link is full duplex, because TX and RX traffic could
    flow at the same time, so you'd probably cause lots of collisions if you
    connect the TX and RX of the tap to a hub.

    Thus, the network sensor would only see parts of the traffic and not be able
    to reassemble it any longer since there are packets missing.

    Cheers,
    Detmar

    -----------------------------------------------
    Chan Kien Eng wrote:

    Hmm..
    Not sure this will work or not..
    Plug the Tx and Rx Taps port to a Hub and plug Network sensor to that
    hub, then you can monitor it with one NIC

    Any suggestion? :)

    BTW, network sensor 7.0 require you to use 2 NIC with Taps for Full
    duplex FE but the best part is it still consider one Network sensor, so
    only one license..

    -- 
    GMX - Die Kommunikationsplattform im Internet.
    http://www.gmx.net