IDS Cable Modem

From: John Doe (jdoe_at_xx.com)
Date: 09/08/04 

Date: Wed, 08 Sep 2004 16:56:57 GMT

Hi All,

OK I have found a number of specs for "read only" stealth CAT5 cables, and
have confugured as follows :

Internet Connection
***************
Internal LAN -> Firewall -> Hub -> Cable Modem -> The Internet

I have set the NIC on the Snort PC manually to 10mbps, as the hub is a
10baseT hub.

Read Only Cable Configuration 1
*************************
At the Snort PC end of the cable. Pins 1 and 2 are linked.

At the Hub end of the cable Pin 1 links to Pin 3, Pin 2 links to Pin 6. ALL
other cables are straight through to other end of the cable.

The cable pair that used to be straight through for Pin 1 and 2 has been
removed from the cable.

See http://seclists.org/lists/focus-ids/2003/Jan/0068.html

Read Only Cable Configuration 2
*************************
At the Hub end of the cable the Pins are as default.

At the Snort PC end of the cable, Pin 1 and Pin 2 are linked. Cables for Pin
1 and Pin 2 from the Hub end are linked to Pin 3 and Pin 6 respectively.

See http://www.linuxjournal.com/article.php?sid=6985

With both the cable configurations my Snort PC captures the packets
correctly. However after a short period of time my cable modem appears to
lock up and no longer permits connection to the internet. During this time
of no connection the Snort PC is still seeing ARP traffic and calls on port
123 (Network Time Protocol) made by the cable modem.

I reset the cable modem and everything is fine for a while. Then the modem
locks up again.

Any thoughts ?

Thanks
HG

Relevant Pages

  • Re: Getting console output
    ... >some cables even with handshake lack the pin 8 connection ... >(From IBMs Adapters, devices and cables guide) ...
    (comp.unix.aix)
  • Re: Log Phone Calls
    ... Many centuries ago, the serial port on many communication devices was standardised to a 25 pin/socket connector, depending on whether they were Data Communication Equipment or Data Terminal equipment ... Bugger it, the standard should have just specified pin OR socket connectors, not both for the two groups ... Yep, you had to have another type of cable where sockets 2 and 3 (no pins in these cables) were swapped, and a heap of others were hooked up in various ways so that eventually the computers could talk. ...
    (microsoft.public.vb.general.discussion)
  • Re: Log Phone Calls
    ... In that I would have to get a 25/9 pin serial cable to be able to ... Many centuries ago, the serial port on many ... communication devices was standardised to a 25 pin/socket connector, ... and 3 (no pins in these cables) were swapped, and a heap of others were ...
    (microsoft.public.vb.general.discussion)
  • Re: Log Phone Calls
    ... In that I would have to get a 25/9 pin serial cable to be able to ... Many centuries ago, the serial port on many ... communication devices was standardised to a 25 pin/socket connector, ... and 3 (no pins in these cables) were swapped, and a heap of others were ...
    (microsoft.public.vb.general.discussion)
  • Re: What is involved in swapping a power source
    ... when there was a 1x6 aux connector. ... The second link is for 20 pin main connectors. ... The next part of your analysis, is how many cables did the old supply have, ... for hard drives or optical drives, or if the new supply has a mix of SATA and ...
    (microsoft.public.windowsxp.hardware)