Snort mailing list archives

Re: question about a receive-only ethernet cable


From: Frank Knobbe <fknobbe () knobbeits com>
Date: 30 Jun 2003 19:29:08 -0500

On Mon, 2003-06-30 at 18:33, Thomas Templin wrote:
BTW. Even if its not a common use, aren't there any sniffing cables 
ready to use which can be ordered?
For me its always a hassle to do this job. All of you who are 100% 
red green blind will know what Im talking about :o)


Not that I know of. The main reason is that you are absolutely violating
Ethernet specs with those cables. For commercial purposes, buy taps.
They don't do any weird stuff like cripple signals with capacitors or
use funky loop-backs. Anyone selling these cables may want to rethink
their decision from a legal perspective (selling parts violating specs
etc).

So, if you wanna working (and guaranteed stuff), buy taps. If you wanna
hack cables, do it yourself, at your own risk.

Regards,
Frank 

Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: