AW: Ethernet tap or span port

From: Matthias Krawutschke (Matthias@krawutschke.com)
Date: 03/04/02


From: Matthias Krawutschke <Matthias@krawutschke.com>
To: "'janfrank.mueller@gecits-eu.com'" <janfrank.mueller@gecits-eu.com>, spyguy703@yahoo.com, focus-ids@securityfocus.com
Date: Mon, 4 Mar 2002 22:31:14 -0000 

Hi,

this is not correct, because you can monitor all traffic and VLAN on the
span-port.

Kind regards

Matthias Krawutschke

-----Ursprüngliche Nachricht-----
Von: janfrank.mueller@gecits-eu.com
[mailto:janfrank.mueller@gecits-eu.com]
Gesendet: Montag, 4. März 2002 09:45
An: spyguy703@yahoo.com; focus-ids@securityfocus.com
Betreff: Re: Ethernet tap or span port

Hi,
be carefull with the 29xx.
You can only use one SPAN Port. And you can only monitor the traffic of one
VLAN or ports of one VLAN.
Last, this port is not bidirectional. You can not respond over this port.

Kind regards

Jan Frank Mueller
IT Security Consulting Group
GE CompuNet Hamburg
Ost- West Strasse 49, 20457 Hamburg, Germany
Phone: +49 40/ 300 53 - 128, Fax: +49 40/ 300 53 -177, Mobile: +49
(0)172/865 522 0
E-Mail : janfrank.mueller @ gecits-eu.com
Visit us on the Internet: http://www.gecits-eu.com

This email is confidential. If you are not the intended recipient,
you must not disclose or use the information contained in it.
If you have received this mail in error, please tell us
immediately by return email and delete the document.

spyguy703@yahoo.com on 01.03.2002 18:53:49

To: focus-ids@securityfocus.com
cc:
Subject: Ethernet tap or span port
                                                                            
                                                                            
 --------------------------------------------------------------------------

Since I cannot buy 20 or 30 Netopics Ethernet taps, can someone give me
some
information about the best way to do port spanning and the limitations of a
span port? (More specifically, a Cisco 2924XL)

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com



Relevant Pages

  • RE: Ethernet tap or span port
    ... You _can_ have more than one span port on the 29xx/3500XL. ... I currently do not have any switches with more than two PSPAN ports. ... Ethernet tap or span port ... situation when you have to mirror the traffic of several ports of the ...
    (Focus-IDS)
  • RE: Ethernet tap or span port
    ... From my experience using port mirroring on the 2900, using one span port is ... Using 2 is pushing your luck and 3 would be complete insanity. ... Ethernet tap or span port ...
    (Focus-IDS)