Snort mailing list archives
Re: Need to monitor 2GB Etherchannel trunk
From: Joe S <js.lists () gmail com>
Date: Tue, 04 Oct 2005 12:59:53 -0700
eric wrote:
On Tue, 2005-10-04 at 12:33:01 -0700, Joe S proclaimed...Any suggestions on how to do this?OpenBSD 3.8 will support trunk interfaces. You can then just monitor the trunk interface. We do that, but with a bridge interface. So basically, in our config, we monitor bridge0.
Seems like that would work. Unfortunately, my taps are 1gig taps. The etherchannel links are 2gig.
I dont know much about etherchannel. Won't there be some sort of media mismatch?
------------------------------------------------------- This SF.Net email is sponsored by: Power Architecture Resource Center: Free content, downloads, discussions, and more. http://solutions.newsforge.com/ibmarch.tmpl _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Need to monitor 2GB Etherchannel trunk Joe S (Oct 04)
- Re: Need to monitor 2GB Etherchannel trunk eric (Oct 04)
- Re: Need to monitor 2GB Etherchannel trunk Joe S (Oct 04)
- Re: Need to monitor 2GB Etherchannel trunk Jeff Coppock (Oct 04)
- <Possible follow-ups>
- RE: Need to monitor 2GB Etherchannel trunk hchemin (Oct 05)
- Re: Need to monitor 2GB Etherchannel trunk eric (Oct 04)