|
-
September 5th, 2007, 06:45 PM
#7
Taps are the way to go, if you can afford em.
I've also tried dumb things like using a box as a router and snort on that box, created a bridge from a linux box and run snort on it.
Hub are cheap and easy, but Taps are great if your budget will allow it.
Port mirroring is nice, some switch will actually dump off pcap info that you can run thru snort as well. I don't have access to a Catalyst to check on it, but Nortel Passports have the option for sure.
Last edited by caveman8fb; September 5th, 2007 at 06:53 PM.
Similar Threads
-
By gore in forum Other Tutorials Forum
Replies: 0
Last Post: October 11th, 2004, 07:07 PM
-
By JohnHACK in forum AntiOnline's General Chit Chat
Replies: 2
Last Post: June 7th, 2003, 04:09 AM
-
By JohnHACK in forum Miscellaneous Security Discussions
Replies: 8
Last Post: June 6th, 2003, 05:01 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Reply With Quote