RE: IDS

From: Batton, David L. (DLB9T@hscmail.mcc.virginia.edu)
Date: 04/26/02 

Date: Fri, 26 Apr 2002 08:46:30 -0400
From: "Batton, David L." <DLB9T@hscmail.mcc.virginia.edu>
To: "Kevin Brooks" <kbrooks@airsmail.com>, <security-basics@securityfocus.com>

Kevin,
   It looks as if you're working with 29XX or 35XX gear using IOS? Is this correct?
I think the commands you are looking for is "port monitor fast 0/x". You should do this
inside the fast ethernet interface you want to use as the monitoring interface and list all the vlans and fast ethernet interfaces you want to monitor on this interface. (similar to how you have listed things in your question)

Hope this helps,

David L. Batton
Telecom Network Analyst
UVA Medical Center

-----Original Message-----
From: Kevin Brooks [mailto:kbrooks@airsmail.com]
Sent: Wednesday, April 24, 2002 3:11 PM
To: security-basics@securityfocus.com
Subject: IDS

On a Cisco switched network does anybody know how to set one port on one of
the switches to mirror all traffic?
I just setup an IDS and this is the one stumbling block I've hit.
I know it's
FastEth x/x
        portforward fastEth 0/1
        portforward fastEth 0/2
        and so on..

Does this sound right?
Thanks,
Kevin

Relevant Pages

  • IDS
    ... I think the commands you are looking for is "port monitor fast 0/x". ... inside the fast ethernet interface you want to use as the monitoring interface and list all the vlans and fast ethernet interfaces you want to monitor on this interface. ... On a Cisco switched network does anybody know how to set one port on one of ...
    (Security-Basics)
  • Re: Port Monitor under Windows XP
    ... > Mircosoft has changed the architecture of Port Monitors under Windows ... > If I use a Windows NT 4.0 Port Monitor everything works fine. ... > spooler does not call Addport in the port monitor server dll. ...
    (microsoft.public.development.device.drivers)
  • RE: Printing a .prn file
    ... I'm running Windows XP Home ... which has all of the printer drivers stored ... BJ Language Monitor ... Check under the Local Port Monitor, make sure that the value "Driver: ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Spoolsv.exe error
    ... I have a friend whos friend installed some 3rd party fax ... Now the printer refuses to work. ... It is also possible that this fax software installed a port monitor that is ...
    (microsoft.public.win2000.printing)
  • Re: Configuring port monitor UI DLL programmatically?
    ... the way to link the Monitor UI DLL to the rest should also be ... I think that the documentation would also benefit from a good ... thanks for the solution to the UI DLL linkage. ... Configuring port monitor UI DLL programmatically? ...
    (microsoft.public.development.device.drivers)
Quantcast