RE: port mirroring for two targets

["Phillip Oliven" <Phillip.Oliven () alamode com>]

If u r sniffing a gigabit network the hub option won't be of much use.
Depending on the switch you are using you may be able to configure two
or more ports to monitor 1 port. The best solution would be a
regenerative tap though. Hope that helps :)

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Stephane Boulet
Sent: Wednesday, July 18, 2007 4:31 PM
To: focus-ids () securityfocus com
Subject: RE: port mirroring for two targets

Plug in a plain old Hub... It will create as many mirrored port as you
want
:)


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On
Behalf Of JGolian () seznam cz
Sent: 18 juillet 2007 07:41
To: focus-ids () securityfocus com
Subject: port mirroring for two targets

I need port mirrored data for snort and for ntop.

How to make it? Is possible to create two mirroring ports?

------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=in
tro_sfw 
to learn more.
------------------------------------------------------------------------



------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it 
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig
n=intro_sfw 
to learn more.
------------------------------------------------------------------------


------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------