Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
[ISSForum] R-Span on Cisco and NIDS
From: InfoSec (InfoSecwilliams.com)
Date: Tue Apr 06 2004 - 16:12:46 CDT
Does anyone have any clues if using R-Spans, (vs normal span and/or taps)will present erroneous information or maybe even not pass certain information to a network sensor? I've heard that span ports won't pass things like crc errors and was just curious if there are new things to be leery of when trying to use an R-Span to pass information to an ISS Sensor. I prefer to be hard tapped in the lines and know that I'm getting everything, but my Network Ops would like to see me use R-Span more often. Taps ensure I have a dedicated connection, they tend to remove my spans when "THEY" need to trouble shoot the network and I can't afford for that to happen.
Or point me to a link as I'm still reading up on R-Span and IDS myself with little luck from a technical perspective.
ISSForum mailing list
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforumiss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.