how to use snort in a switched environment

["Jeremy Rodriguez" <jeremyrodriguez () cmsmechanical com>]

> From snort DOCS:
Q: I'm on a switched network, can I still use Snort?

A: Being able to sniff on a switched network depends on what type of
   switch is being used.  If the switch can mirror traffic, then set
   the switch to mirror all traffic to the snort machine's port.

My question is that I have a Cisco WS-C2924-XL and I was wondering if anyone
has used snort and these switches successfully.


The only other way I have found is:

INET
     |
ROUTER
     |
 HUB --------- SNORT
     |
SWITCH
     |
COMPANY




-------------------------------------------------------
Enterprise Linux Forum Conference & Expo, June 4-6, 2003, Santa Clara
The only event dedicated to issues related to Linux enterprise solutions
www.enterpriselinuxforum.com

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users