-----Original Message-----
From: Albert E. Whale
Sent: Sunday 17 December 2006 07:46
To: snort-users@lists.sourceforge.net
Subject: [Snort-users] Which switches are recommneded
I have an opportunity to implement a Corporate backbone with the right
tools.
I originally was reviewing the Linksys Managed Switches, until I
discovered that these devices do not support SPAN (Switch Port
ANalyzer), which permits traffic to be monitored by another port (did I
need to say this in this group, probably not!).
Anyway, are there any other switches being used that permit the Snort
IDS to monitor traffic in the switch (without using an external device?).
TIA
All the Nortel switches support port mirroring. Most allow you to mirror on
ingress and/or egress per port to at least one mirrored port, and some
allow you to mirror to a remote IP address. You can filter for specific
traffic, or all traffic. This is on both the Layer 2 and the Layer 3
switches.
jc
--
Jeff Coppock
Network Engineer
Diggin' Debian
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users
