It depends on the make and model of the device you're trying to create
the mirrored port on. Some devices don't allow you to create more
than one mirrored interface for a particular port.
You may also want to look at getting a network tap which would
probably allow you to monitor a particular interface with multiple
sensors.
Hope this helps.
On 18 Jul 2007 11:41:15 -0000, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
I need port mirrored data for snort and for ntop.
How to make it? Is possible to create two mirroring ports?
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to
http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------
--
Andrew Hay
blog: https://www.andrewhay.ca
email: andrewsmhay || at || gmail.com
------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it
with real-world attacks from CORE IMPACT.
Go to http://www.coresecurity.com/index.php5?module=Form&action=impact&campaign=intro_sfw
to learn more.
------------------------------------------------------------------------
