Snort mailing list archives

Re: Passive Tap Help


From: Frank Knobbe <frank () knobbe us>
Date: Mon, 01 Dec 2003 09:06:03 -0600

On Mon, 2003-12-01 at 07:50, Peters, Michael D. wrote:
I have been examining the diagram for the passive tap. I don't really
understand and I was hoping someone would clarify the drawing for me?

I think you are confusing the read-only cables with taps. These cables
are a cheap-mans tap. Real taps work differently. 

Inside the tap is where I think my understanding has broken down. The
picture seems to indicate that there is a crossover occurring on the actual
<CABLE> which I know would not work.

Work fine for me. Please indicate which cable you are talking about. The
one in the Snort FAQ uses a feedback to fake a link (and hence can only
be used on a hub, not a switch). Other cables munge the Send signal with
capacitors.

Taps are different. They take the Receive line and feed it into
electronics, providing amplification, stabilization and an output driver
stage. In other words, there is electronics behind them, not just some
cable wizardy.

Regards,
Frank


Attachment: signature.asc
Description: This is a digitally signed message part


Current thread: