I looked at ossim a couple of times but never set it up , however, any app that monitors the edge , like ntop for example always required a hub or a mirrored port.
From: Joe Heaton [mailto:[email protected]] Sent: Friday, January 02, 2009 14:24 To: NT System Admin Issues Subject: Question about OSSIM The box that has OSSIM installed on it, should it be plugged in to a switch port that is monitoring all other network ports? i.e. a mirrored port? Joe Heaton AISA Employment Training Panel 1100 J Street, 4th Floor Sacramento, CA 95814 (916) 327-5276 [email protected] ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
