From owner-freebsd-security Tue Oct 8 11: 4:17 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4DE7337B401 for ; Tue, 8 Oct 2002 11:04:16 -0700 (PDT) Received: from cithaeron.argolis.org (pool-138-88-90-249.res.east.verizon.net [138.88.90.249]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6EEF043E3B for ; Tue, 8 Oct 2002 11:04:15 -0700 (PDT) (envelope-from piechota@argolis.org) Received: from cithaeron.argolis.org (localhost [127.0.0.1]) by cithaeron.argolis.org (8.12.6/8.12.5) with ESMTP id g98I4DvL001064; Tue, 8 Oct 2002 14:04:13 -0400 (EDT) (envelope-from piechota@argolis.org) Received: from localhost (piechota@localhost) by cithaeron.argolis.org (8.12.6/8.12.6/Submit) with ESMTP id g98I4D9g001061; Tue, 8 Oct 2002 14:04:13 -0400 (EDT) X-Authentication-Warning: cithaeron.argolis.org: piechota owned process doing -bs Date: Tue, 8 Oct 2002 14:04:13 -0400 (EDT) From: Matt Piechota To: twig les Cc: freebsd-security@FreeBSD.ORG Subject: Re: Sniffer nic In-Reply-To: <20021008175440.76297.qmail@web10107.mail.yahoo.com> Message-ID: <20021008140221.R396-100000@cithaeron.argolis.org> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Tue, 8 Oct 2002, twig les wrote: > Hey *, I need another nic (10/100 copper) for sniffing > and was wondering if anyone had input as to which one > kicks ass. I'm planning on either an Intel Pro or > 3Com, not sure which model yet. Anyone had something > so good that they want to recommend it? The box is > 4.6 Release (fully patched) running Snort 1.8.7. > Hardware is dual P3-1GHz, 2gig ram, scsi blah blah > blah, the only really interesting thing is that I have > an empty 64-bit, 66mhz PCI slot so I can use that for > a good nic if possible. I've had good luck with Intel 8255x NICs, ie EtherExpress Pro, both in card form and in laptops (built-in). I could record a most saturated 100Mbit line on a P2-350 (using Ethereal and FreeBSD) -- Matt Piechota To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message