Re: Anyone know of a good switch for snorting?

[Erek Adams <erek () theadamsfamily net>]

On Thu, 20 Sep 2001, Jeff Anderson wrote:

> Snort has been working great so far, on the outside of my firewall.  I'm
> logging to a central mysql db and using demarc for monitoring.  Now I'd like
> to start monitoring the internal network, except that our switch doesn't
> have a mirror port.  Can anyone suggest a good 16-port 100Mbps switch, that
> has a mirror port for a snort sensor?  Feel free to respond off the list if
> this has been discussed before.  Thanks in advance,

You've really got another option:: Shomiti Taps.  Might be a bit less cash
than a good switch.

Switch suggestions:  Cisco 2924.  I don't think you can beat it at the lower
end.  If you're doing Data Center level stuff, look at a 6509 series.  Or at
least that what my wife, the network geek, tells me.  :-)

-----
Erek Adams
Nifty-Type-Guy
TheAdamsFamily.Net


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users