>
> > Can I enable "port mirroring" on a ServerIron XL? I have a host that's
> > acting up and I'd like to mirror all of its traffic to another port so
> > Snort can listen to it.
>
>
> I've never tried it, but the manuals seem to indicate that you can.
>
> Use the "mirror-port" command to define a mirror port, and
> the "monitor on" command within the interface definition to specify
> the port to be mirrored.
>
> See http://www.foundrynet.com/services/documentation/siCLI/ServerIron_CLI_global_CONFIG.html#31529
>
Just a quick followup - thanks! This worked. I must have been blind when I
was looking at the documentation. :)
-Jonathan
> > Can I enable "port mirroring" on a ServerIron XL? I have a host that's
> > acting up and I'd like to mirror all of its traffic to another port so
> > Snort can listen to it.
>
>
> I've never tried it, but the manuals seem to indicate that you can.
>
> Use the "mirror-port" command to define a mirror port, and
> the "monitor on" command within the interface definition to specify
> the port to be mirrored.
>
> See http://www.foundrynet.com/services/documentation/siCLI/ServerIron_CLI_global_CONFIG.html#31529
>
Just a quick followup - thanks! This worked. I must have been blind when I
was looking at the documentation. :)
-Jonathan