From: InfoSec (InfoSecwilliams.com)
Date: Tue Apr 06 2004 - 16:12:46 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Does anyone have any clues if using R-Spans, (vs normal span and/or taps)will present erroneous information or maybe even not pass certain information to a network sensor? I've heard that span ports won't pass things like crc errors and was just curious if there are new things to be leery of when trying to use an R-Span to pass information to an ISS Sensor. I prefer to be hard tapped in the lines and know that I'm getting everything, but my Network Ops would like to see me use R-Span more often. Taps ensure I have a dedicated connection, they tend to remove my spans when "THEY" need to trouble shoot the network and I can't afford for that to happen.

Or point me to a link as I'm still reading up on R-Span and IDS myself with little luck from a technical perspective.

Thanks -
Erin

_______________________________________________
ISSForum mailing list
ISSForumiss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforumiss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]