OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Snort-users] Cisco 6500 SPAN limitations, dropping packets, VACLs, RSPAN, real world

From: twig les (twiglesyahoo.com)
Date: Wed Apr 28 2004 - 11:09:31 CDT


You ask a lot of tough questions and I'll be honest that I don't
know most the answers. We've been using 6500s in our core for
years and sniffing/snorting off of them without a hitch the
entire time, both on CatOS and IOS.

We have about 14-15Mbps sustained traffic coming from tons of
different ports, vlans and src/dst pairs through the CatOS pair
and use the sniffers constantly to verify and troubleshoot
traffic and have never noticed any missing traffic so I'm not
sure what the ingress/egress limitations equate to in the
trenches.

I tried the link but it was dead, even after signing into CCO
and pasting the .htm.... that got wrapped around in the email.
Try posting here:
http://forums.cisco.com/eforum/servlet/NetProf?page=main

I have gotten a lot of good responses there as Cisco pays CCIEs
to lurk the board. They have even given me crappy news (with
slight sugar-coating but not marketing fluff). Let me know if
you don't have a CCO login and I'll just post your email.

=====
-----------------------------------------------------------
With a few exceptions, secrecy is deeply incompatible with
democracy and with science.
     --Carl Sagan
-----------------------------------------------------------

        
                
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
http://hotjobs.sweepstakes.yahoo.com/careermakeover

-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g.
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users