From: Joel Esler (joel.eslersourcefire.com)
Date: Fri Sep 16 2005 - 09:16:15 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Are you sure it's a tap? "it does exactly what a tap should do and
outputs all traffic it receives
> on any of the 3 ports to all the other ports." -- Sounds like a
> hub to me.

Joel Esler

On Sep 16, 2005, at 9:45 AM, Brett, Gary wrote:

> Hi there
>
> Just a quick question, I have in my possession a simple little
> plastic tap
> (basically a little adapter type thing that has 3 RJ48 ports on it,
> it is
> not a powered device just a little internally wired adapter). After
> testing
> it, it does exactly what a tap should do and outputs all traffic it
> receives
> on any of the 3 ports to all the other ports.
>
> My question is this, from reading snort mailing list archives and
> FAQ's,
> people are suggesting that one should invest in a more complex,
> powered unit
> e.g. Shomiti, Finisar and Netoptics etc costing many hundreds of
> dollars in
> some cases. I would just like to know why my little plastic $5
> gizmo is not
> on that list of recommended items ? Is there something my gizmo
> does or does
> not do that makes it a bad choice for a SNORT NIDS (even in my
> small test
> environment). I would really like to know
>
>
> Any help on this would be greatly appreciated
> Gary
>
>
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server.
> Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Snort-users mailing list
> Snort-userslists.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
>
>

-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
Snort-users mailing list
Snort-userslists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]