You could try using TopLayer's IDSLB as this is something we have been
doing for some years now! Apologies for jumping in as a vendor.
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of Koch, Christian
Sent: 18 July 2007 19:30
To: JGolian@seznam.cz; focus-ids@securityfocus.com
Subject: RE: port mirroring for two targets
What kind of switch are you using?
-----Original Message-----
From: listbounce@securityfocus.com [mailto:listbounce@securityfocus.com]
On Behalf Of JGolian@seznam.cz
Sent: Wednesday, July 18, 2007 7:41 AM
To: focus-ids@securityfocus.com
Subject: port mirroring for two targets
I need port mirrored data for snort and for ntop.
How to make it? Is possible to create two mirroring ports?
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=intro_sfw
to learn more.
------------------------------------------------------------------------
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=intro_sfw
to learn more.
------------------------------------------------------------------------
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------
