From owner-freebsd-security Tue Oct 8 14:21:54 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9D95B37B401 for ; Tue, 8 Oct 2002 14:21:50 -0700 (PDT) Received: from web10102.mail.yahoo.com (web10102.mail.yahoo.com [216.136.130.52]) by mx1.FreeBSD.org (Postfix) with SMTP id 5BAEB43E77 for ; Tue, 8 Oct 2002 14:21:50 -0700 (PDT) (envelope-from twigles@yahoo.com) Message-ID: <20021008212150.26159.qmail@web10102.mail.yahoo.com> Received: from [68.5.49.41] by web10102.mail.yahoo.com via HTTP; Tue, 08 Oct 2002 14:21:50 PDT Date: Tue, 8 Oct 2002 14:21:50 -0700 (PDT) From: twig les Subject: Re: Sniffer nic To: Duncan Patton a Campbell is Dhu , Matt Piechota Cc: freebsd-security@FreeBSD.ORG In-Reply-To: <20021008205801.M19596@babayaga.neotext.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Nope, nothing like that. Just some good old L3-7 NIDS. A couple things I was wondering though.... Is anyone running the "ANA-62011 64-bit single port 10/100baseTX adapter" from Adaptec? It's supported by 4.6 release, but I won't be on site for the installation so I'm looking for easy installation here. This leads to the second question which is: What kind of performance increase will I see with a 64-bit 100BT nic vs the same card running in a 32-bit slot? I'm tryig to figure out if it's worth the extra $30 before I tell my boss to get it (well...ask him). Thnx for the answers so far though. --- Duncan Patton a Campbell is Dhu wrote: > Hmm. I don't know anything about the cards > mentioned here > or the application you are putting the sniffer to, > but you > should > consider whether you need to look outside the usual > sense > window for the card -- iff you are looking for > network layer > virii > or other out-band transmissions. > > Dhu > > > On Tue, 8 Oct 2002, twig les wrote: > > > > > Hey *, I need another nic (10/100 copper) for > sniffing > > > and was wondering if anyone had input as to > which one > > > kicks ass. I'm planning on either an Intel Pro > or > > > 3Com, not sure which model yet. Anyone had > something > > > so good that they want to recommend it? The box > is > > > 4.6 Release (fully patched) running Snort 1.8.7. > > > Hardware is dual P3-1GHz, 2gig ram, scsi blah > blah > > > blah, the only really interesting thing is that > I have > > > an empty 64-bit, 66mhz PCI slot so I can use > that for > > > a good nic if possible. > > > > I've had good luck with Intel 8255x NICs, ie > > EtherExpress Pro, both in card form and in laptops > > > (built-in). I could record a most saturated > 100Mbit > > line on a P2-350 (using Ethereal and FreeBSD) > > > > -- > > Matt Piechota > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of > > > the message > > > Duncan Patton a Campbell is Duihb > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of > the message ===== ----------------------------------------------------------- Heavy metal made me do it. ----------------------------------------------------------- __________________________________________________ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message