If u r sniffing a gigabit network the hub option won't be of much use. Depending on the switch you are using you may be able to configure two or more ports to monitor 1 port. The best solution would be a regenerative tap though. Hope that helps :)
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephane Boulet Sent: Wednesday, July 18, 2007 4:31 PM To: [email protected] Subject: RE: port mirroring for two targets Plug in a plain old Hub... It will create as many mirrored port as you want :) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 18 juillet 2007 07:41 To: [email protected] Subject: port mirroring for two targets I need port mirrored data for snort and for ntop. How to make it? Is possible to create two mirroring ports? ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig n=in tro_sfw to learn more. ------------------------------------------------------------------------ ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaig n=intro_sfw to learn more. ------------------------------------------------------------------------ ------------------------------------------------------------------------ Test Your IDS Is your IDS deployed correctly? Find out quickly and easily by testing it with real-world attacks from CORE IMPACT. Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw to learn more. ------------------------------------------------------------------------
