From: Paul Halliday (paul.hallidaygmail.com)
Date: Fri Aug 03 2007 - 20:14:23 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Providing you are referring to the same stream of data, you would not require 2.

I use numerous tools; netflow, snort, sancp, etc all utilizing the
same data from the same span port.

Why would you need two? Can you provide more detail on what exactly it
is you are trying to achieve?

> From: listbouncesecurityfocus.com [mailto:listbouncesecurityfocus.com]
> On Behalf Of JGolianseznam.cz
> Sent: Wednesday, July 18, 2007 7:41 AM
> To: focus-idssecurityfocus.com
> Subject: port mirroring for two targets
>
> I need port mirrored data for snort and for ntop.
> How to make it? Is possible to create two mirroring ports?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]