Re: SPAN question

From: James Ventre (messageboard@ventrefamily.com)
Date: Mon Aug 14 2006 - 16:50:12 ART


It's not considered a best practice - that's for sure.

But WebSense often needs to send back redirects and resets to intercept
http traffic. Some do this by allowing them to inject via the same
wire they get the span feed from.

It's often nice to be "on net" while sniffing a network too (with one NIC)

James

Stefan Grey wrote:
> Guys,
> could you please explain me why this ingress word is needed??? I read
> the explanation in the doc but can't imagine any live situation where
> this may be needed?? Could you please tell where this may be needed??
> Some situation??
> Thanks.



This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:57 ART