Re: Network Monitor

From: Petr Lapukhov (petrsoft@gmail.com)
Date: Mon May 08 2006 - 03:37:55 ART

• Next message: lim es: "R&S Lab in sydney"
• Previous message: Subhash P: "Network Monitor"
• Maybe in reply to: Subhash P: "Network Monitor"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello,

Basically you can do that by using two network interfaces at IDS server.

One interface collects monitored traffic, another one is control one, and is
used
to send TCP resets.

Another options would be using "ingress" option of monitor session
configuration.
That option permits incoming traffic on monitoring interface.

Rack1SW1(config)#monitor session 1 destination interface fastEthernet 0/4 ?
  encapsulation Set encapsulation for destination interface
  ingress Enable ingress traffic forwarding
  <cr>

HTH
Petr

2006/5/8, Subhash P <subhashccie@gmail.com>:
>
> Hi all,
>
> Can anyone tell me how to configure monitor session on a 3550 switch in
> order to accomplish IDS TCP resets?
>
> Regards,
> Subhash.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

• Next message: lim es: "R&S Lab in sydney"
• Previous message: Subhash P: "Network Monitor"
• Maybe in reply to: Subhash P: "Network Monitor"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 01 2006 - 06:33:21 ART