Re: real basic starter rules

[Harry Putnam <reader () newsguy com>]

Rich Adamson  <radamson () routers com> writes:

> Watch the Netgear stuff closely. It might not say "switch" anywhere, but
> some of their boxes essentially perform the switch function under some
> circumstances. We've been using a Netgear DS104 hub for a couple years
> as an access mechanism to perform professional protocol analysis (sniffing)
> and other network services for clients in 40+ states. When the ports on
> this "hub" are running at the _same_ speed (10 or 100), it performs as
> a hub. If the port speeds differ, it performs as a switch without any
> shadow of a doubt. Proven time and again.
> Same for some of the 3Com hubs.

Thanks.. that seems to be the problem I'm seeing.  It is covered in
the `ethereal' faq as well, as someone pointed out in this thread.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users