SPAN/Port mirroring on Linksys switch

Posted by Bastien974 on Server Fault See other posts from Server Fault or by Bastien974
Published on 2010-06-17T14:40:06Z Indexed on 2010/06/17 14:43 UTC
Read the original article Hit count: 348

Filed under:

switch

|

linksys

|

snort

|

ids

Hi all,

I'm trying to deploy a Snort box in my LAN. I have a Linksys SRW248G4 and trying to configure Port mirroring so that Snort can listen everything on the network in promiscuous mode.

So in ADMIN / Port Mirroring, I have 3 things:

Source Port (e1,...e48, g1...g4)
Type (Rx, Tx, Both)
Target (e1...e48, g1...g4)

Last time I played with it, I killed all traffic on the switch, I had to reboot it several times... so now I'm asking question before:

Do I need to configure each Source Port (from 1 to 48) to forward to the single promiscuous port ? 48 rules !? Is that correct ?

Thanks !

© Server Fault or respective owner

Related posts about switch

Problem connecting a 3Com 2952-Plus switch to a Cisco 3750 switch

as seen on Server Fault - Search for 'Server Fault'
Connected a 3Com 2952-SFP Plus switch to a Cisco 3750 switch via fibre. There is a light on the 3Com end, but nothing at the Cisco end, and no traffic will flow. Have swapped SFP's, have swapped fibre cables, have used a different port on the Cisco, have even swapped the 3Com switch, but still no… >>> More
enable Cisco switch to communicate withe HP switch

as seen on Server Fault - Search for 'Server Fault'
I have one CISCO 2906g and hp 2626 switches i link them by MM fiber optic cable, the problem the cant communicate with each other, i verify there is no problem with cable and JBC's. win i connect other HP switch in the other end it will communicate without any problem, but not with CISCO >>> More
SQL Server database with clustered GUID PKs - switch clustered index or switch to sequential (comb)

as seen on Stack Overflow - Search for 'Stack Overflow'
We have a database in which all the PKs are GUIDs, and most of the PKs are also the clustered index for the table. We know that this is bad (due to the random nature of GUIDs). So, it seems there are basically two options here (short of throwing out GUIDs as PKs altogether, which we cannot do (at… >>> More
Repository pattern - Switch out the database and switch in XML files

as seen on Stack Overflow - Search for 'Stack Overflow'
Repository pattern - Switch out the database and switch in XML files. Hello I have an asp.net MVC 2.0 project and I have followed the Repository pattern. Periodically, I am losing access to the database server so I want to have another mechanism in place (XML files) to continue developing. It is… >>> More
MS SQL Database with clustered GUID PKs - switch clustered index or switch to sequential (comb) GUID

as seen on Stack Overflow - Search for 'Stack Overflow'
We have a database in which all the PKs are GUIDs, and most of the PKs are also the clustered index for the table. We know that this is bad (due to the random nature of GUIDs). So, it seems there are basically two options here (short of throwing out GUIDs as PKs altogether, which we cannot do (at… >>> More

Related posts about linksys

DD-WRT Linksys WRT320N Max Tx Power

as seen on Super User - Search for 'Super User'
What is the save max Tx Power setting for WRT320N? >>> More
Weird networking problem ( Linksys, Windows 7 )

as seen on Super User - Search for 'Super User'
Okay it's a bit tough to figure out where to start from, but here is the basic summary of the issue: During general internet usage, there are times when any attempt to visit a website stalls at "Waiting for somedomain.com". This problem occurs in Firefox, IE and Chrome. No website will load, INCLUDING… >>> More
Linksys WRT54GC v2.0 - all connection lights flashing

as seen on Super User - Search for 'Super User'
I have just received a Linksys WRT54GC router of a friend. Apperantly it has stopped working. All lights on it are flashing apart from the power and wireless light. I have read of similar issues online but not ones describing the same set of lights flashing. I have tried connecting to the device… >>> More
Connect to host by name using a Linksys wrt54g as my router and dhcp server

as seen on Super User - Search for 'Super User'
I have a Linksys WRT54G router at my house. How do I enable/perform connect-by-name on my network (like "kitchen" and "musicbox") on Windows XP, Linux (Ubuntu and CentOS), and Mac clients? Sometimes it seems to work "on its own", but normally I have to go by IP address - which is a bit of a pain… >>> More
Home and Small to Medium Enterprise network manufacturer choice, Netgear, Linksys or D-Link ?

as seen on Server Fault - Search for 'Server Fault'
(Please don't close this post, it's a serious post so... Be cool, no trolls please, I need an answer ;p) Hello, I am looking for an alternative to Cisco (too expensive for me !) for semi-pro utilization (at home but with advanced feature (I'm studying in IT)) and in small/medium enterprises. I think… >>> More