Re: Port Mirroring

[Justin Pederson <jpedersm () gmail com>]

Thank you Scott.  After reading a book suggested in another post I might
just go with Security onion as well as long as I can get silk up and
going.  For the router/switch I might just use this in the link then I can
get gig speeds on the LAN.

On Tue, Dec 6, 2016 at 9:43 PM, Bruce Ferrell <bferrell () baywinds org> wrote:

> Taps get weird.  You  *might* try openvswitch, bind the interfaces of
> interest to virtual ports and do your SPAN ports there
>
> On 12/06/2016 06:43 AM, Justin Pederson wrote:
> > What are you guys doing to Mirror Ports.  I was going to use my wireless
> router I got from the ISP but I found out last night this can not be done
> with it.  I do have a 2950 and
> > 2960 switch that I can setup mirroring on but you rather not have them
> running in my office constantly.  Any idea on what the difference between a
> hub and network tap will be?
> > If the network tap is the way to go any idea on some have way decent
> ones for a home lab?
> > ------------------------------------------------------------
> ------------------
> > Developer Access Program for Intel Xeon Phi Processors
> > Access to Intel Xeon Phi processor-based developer platforms.
> > With one year of Intel Parallel Studio XE.
> > Training and support from Colfax.
> > Order your platform today.http://sdm.link/xeonphi
> >
> >
> > _______________________________________________
> > Snort-users mailing list
> > Snort-users () lists sourceforge net
> > Go to this URL to change user options or unsubscribe:
> > https://lists.sourceforge.net/lists/listinfo/snort-users
> > Snort-users list archive:
> > http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
> >
> > Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
>
>
>
> ------------------------------------------------------------
> ------------------
> Developer Access Program for Intel Xeon Phi Processors
> Access to Intel Xeon Phi processor-based developer platforms.
> With one year of Intel Parallel Studio XE.
> Training and support from Colfax.
> Order your platform today.http://sdm.link/xeonphi
> _______________________________________________
> Snort-users mailing list
> Snort-users () lists sourceforge net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users
>
> Please visit http://blog.snort.org to stay current on all the latest
> Snort news!
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today.http://sdm.link/xeonphi

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!