TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------
One point to consider when using port mirroring with a switch. We have had cases
where the sniffer's mirrored port showed traffic that was slightly different that
the port it was mirroring. Apparently this was caused by the switch's processing
of the packets before passing them on to the mirrored port. This isn't
sufficient reason to abandon using port mirroring, since it would only rarely be
an issue (examples where it could matter might be attacks involving malformed
packets). Anyway, for what its worth...
"Greaser, Kirk N." wrote:
> TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
> [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems!
> ----------------------------------------------------------------------------
> Vincent
> FYI: A gotcha with the tap is that you cannot run kills, as it a one way
> communication.
> Also, if you put the hub upstream from the switch, you would miss any
> communication that is switched on the switch bus but never goes upstream.
> (Cannot see some in-house hacks, though you would see the traffic in and out
> of the switch).
>
> Using a port with spanning configured would do the trick.
> Kirk
> -----Original Message-----
> From: Bridge, Jim [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, February 17, 2000 10:39 AM
> To: '???'
> Cc: '[EMAIL PROTECTED]'
> Subject: RE: switching hub problem
>
------------------------------------------------------
Ray Honeycutt 919.779.3055 Voice
President 919.779.3464 Fax
HCS Systems Inc. www.hcssystems.com
4470 Zacks Mill Rd. [EMAIL PROTECTED]
Angier NC 27501, USA
