IDS mailing list archives

RE: Foundry ServerIronXL Question


From: "Lim Meng Koon" <ccelimmk () nus edu sg>
Date: Sat, 28 Jun 2003 11:09:31 +0800

In Foundry terms, it's called "mirror"....

At the global config level, use "mirror-port <interface>" to configure
the interface where you want to plug in your traffic analyser. To start
sending traffic to this mirror-port from another interface, go to that
interface config, and set "monitor <both|in|out>"

These are cmds that worked on the ServerIron 400, I think they should be
similar to ServerIronXL.

Hope this helps.

Regards
mengkoon

-----Original Message-----
From: Robert Strain [mailto:Robert.Strain () guardent com] 
Sent: Friday, June 27, 2003 9:12 AM
To: 'focus-ids () securityfocus com'
Subject: Foundry ServerIronXL Question


Does Foundry's ServerIronXL support "remote span" (Cisco Term) like port
mirroring? I've checked out Foundry's web site without success, but they
might have another vernacular for the same feature.

Thanks in advance for the answer.

Bob



------------------------------------------------------------------------
-------
Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas,
the 
world's premier technical IT security event! 10 tracks, 15 training
sessions, 
1,800 delegates from 30 nations including all of the top experts, from
CSO's to 
"underground" security specialists.  See for yourself what the buzz is
about!  
Early-bird registration ends July 3.  This event will sell out.
www.blackhat.com
------------------------------------------------------------------------
-------


-------------------------------------------------------------------------------
Attend the Black Hat Briefings & Training, July 28 - 31 in Las Vegas, the
world's premier technical IT security event! 10 tracks, 15 training sessions,
1,800 delegates from 30 nations including all of the top experts, from CSO's to
"underground" security specialists.  See for yourself what the buzz is about!
Early-bird registration ends July 3.  This event will sell out. www.blackhat.com
-------------------------------------------------------------------------------


Current thread: