Snort mailing list archives

Can anyone recommend an ethernet tap?


From: Martin Olsson <elof () sentor se>
Date: Wed, 6 Oct 2004 12:24:59 +0200 (CEST)


I want to buy an ethernet tap where snort will listen.

A----Tap----B
      |
   Sniffer

Criteria:
* 100Mbps
* full duplex (not a hub then)
* the throughput between A and B should be almost the same as using a
  X-patch cable
* the sniffer port should see both directions of the traffic (if A and B
  generate more than 100Mbps together, start dropping packets), I do not
  want two sniffer ports where one see A->B and the other B->A, I just
  want one port that mirror B<->B

Maybe the sniffer-port could be 1Gbps, then packets wouldn't have to be
dropped, but I guess that the price of a gigabit tap is far more than a
100Mbps one...

I do not want to use a hub.
I do not want to use a switch with port mirroring support.

What product(s) should I look for? Not too expensive please. :-)

/Martin



-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: