OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Klement, Charles (cjkFLUKE.COM)
Date: Thu Apr 05 2001 - 18:23:34 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

     
    I belive what he is trying to do is configure what is commonly called a
    "span" or a "mirror" port. It looks like 3com calls this an analysis port.
    Check out
    http://support.3com.com/infodeli/tools/switches/s_stack2/1695/manual.a01/man
    age.pdf
    <http://support.3com.com/infodeli/tools/switches/s_stack2/1695/manual.a01/ma
    nage.pdf> page 87 should help out.
     
    -charles

     -----Original Message-----
    From: Chris Ceykovsky [mailto:ceykoSWBELL.NET]
    Sent: Thursday, April 05, 2001 3:08 PM
    To: <mailto:FOCUS-IDSSECURITYFOCUS.COM> FOCUS-IDSSECURITYFOCUS.COM
    Subject: Re: Switch configuration

    I think what you are referring to is also known as the Out-of-Band
    Management port as well. Although I am not clear on his question, I don't
    think that type of port will work. It is only good for SNMP, Telnet, ICMP,
    RMON...etc...mainly statistics and management type of thing. It does not
    participate in routing or switching activities.
     
    I personally am not familiar with a spamming port on any switch. If you
    could be a little more specific, I could probably help more.

    Take care,
    Chris
     
    ----- Original Message -----

    From: Koaps <mailto:koaps2NUTZ.COM>
    To: FOCUS-IDSSECURITYFOCUS.COM <mailto:FOCUS-IDSSECURITYFOCUS.COM>
    Sent: Thursday, April 05, 2001 4:34 PM
    Subject: Re: Switch configuration

    You mean a Management Port?
     
    one where all traffic is sent to it right...
     
     
    don't know, but I do know the Cisco's and HP's call it a Management port...
    might help when looking for Documentation.
     
    L8rZ,
     
      )\_/(
     < o,0 >
        ~
        \ /
     
    KoAps
     

     

    ----- Original Message -----
    From: Jose Vicente da Costa Machado Filho <mailto:JVicenteAMERICEL.COM.BR>

    To: FOCUS-IDSSECURITYFOCUS.COM <mailto:FOCUS-IDSSECURITYFOCUS.COM>
    Sent: Thursday, April 05, 2001 2:16 PM
    Subject: Switch configuration

    Hi all!

    Someone knows if the 3Com SuperStack II 3300 switch accept the spamming port
    configuration allowing the attachment of an IDS at one of it´s ports?

    Regards,

    José Vicente da C Machado
    AMERICEL
    I.T. - Segurança de Informações
    email: jvicenteamericel.com.br <mailto:jvicenteamericel.com.br>
    office:(61) 329-6698
    fax:(61) 329-6709
    mobile:(61) 929-0016
    http://www.americel.com.br <http://www.americel.com.br>