Re: [Os-sim-support] snort on ossim

[Kaushal S. <kau...@gm...>]

On Fri, Apr 2, 2010 at 12:11 AM, Ritter, Nicholas
<Nic...@am...> wrote:
> Are you sure the eth interface that snort is listening on is on a switch
> port that should see the traffic you are interested in (ie.: that it is
> a mirror port) also, is the eth interface in promiscuous mode (do an
> "ifconfig" and look for the "PROMISC" keyword.)
>
> Nick

Hi Nick,

Thanks for the hint. How do i do a port mirror on the switch. Please suggest.

Thanks and Regards,

Kaushal