OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
RE: port mirroring for two targets

From: Phillip Oliven (Phillip.Olivenalamode.com)
Date: Thu Jul 19 2007 - 11:40:06 CDT

If u r sniffing a gigabit network the hub option won't be of much use.
Depending on the switch you are using you may be able to configure two
or more ports to monitor 1 port. The best solution would be a
regenerative tap though. Hope that helps :)

-----Original Message-----
From: listbouncesecurityfocus.com [mailto:listbouncesecurityfocus.com]
On Behalf Of Stephane Boulet
Sent: Wednesday, July 18, 2007 4:31 PM
To: focus-idssecurityfocus.com
Subject: RE: port mirroring for two targets

Plug in a plain old Hub... It will create as many mirrored port as you
want
:)

-----Original Message-----
From: listbouncesecurityfocus.com [mailto:listbouncesecurityfocus.com]
On
Behalf Of JGolianseznam.cz
Sent: 18 juillet 2007 07:41
To: focus-idssecurityfocus.com
Subject: port mirroring for two targets

I need port mirrored data for snort and for ntop.

How to make it? Is possible to create two mirroring ports?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=in
tro_sfw
to learn more.
------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=intro_sfw
to learn more.
------------------------------------------------------------------------

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------