IDS: Re: port bonding and taps

From: Michael Stone <mstone_at_mathom.us>
Date: Thu, 2 Oct 2003 11:11:02 -0400

On Thu, Oct 02, 2003 at 10:57:54AM -0400, Jeffrey.Stebelton_at_bisys.com wrote:
>What we have done is to set a 10 Mb Ethernet hub up near the tap and run
>both tap ports into it.

Be aware that both this method and the spanning port method *will* cause
traffic to be lost on any reasonably well-utilized link.

Mike Stone

---------------------------------------------------------------------------
Captus Networks IPS 4000
Intrusion Prevention and Traffic Shaping Technology to:
- Instantly Stop DoS/DDoS Attacks, Worms & Port Scans
- Automatically Control P2P, IM and Spam Traffic
- Precisely Define and Implement Network Security & Performance Policies
FREE Vulnerability Assessment Toolkit - WhitePapers - Live Demo
http://www.securityfocus.com/sponsor/CaptusNetworks_focus-ids_000101
---------------------------------------------------------------------------
Received on Oct 02 2003