OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: port mirroring for two targets

From: Andrew Hay (andrewsmhaygmail.com)
Date: Wed Jul 18 2007 - 13:46:06 CDT


It depends on the make and model of the device you're trying to create
the mirrored port on. Some devices don't allow you to create more
than one mirrored interface for a particular port.

You may also want to look at getting a network tap which would
probably allow you to monitor a particular interface with multiple
sensors.

Hope this helps.

On 18 Jul 2007 11:41:15 -0000, JGolianseznam.cz <JGolianseznam.cz> wrote:
> I need port mirrored data for snort and for ntop.
>
> How to make it? Is possible to create two mirroring ports?
>
> ------------------------------------------------------------------------
> Test Your IDS
>
> Is your IDS deployed correctly?
> Find out quickly and easily by testing it
> with real-world attacks from CORE IMPACT.
> Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
> to learn more.
> ------------------------------------------------------------------------
>
>

--
Andrew Hay
blog: https://www.andrewhay.ca
email: andrewsmhay || at || gmail.com

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------