[OT] HP Procurve Port mirroring and Snort
-----BEGIN PGP SIGNED MESSAGE-----
Thought I'd ask here, as some of you may actually have real life
experience with running
port mirroring on HP 41xx.
We are looking at running snort (on Debian ^^ ) and wanted to monitor
as much of our
traffic as possible. Port mirroring on the HPs only seems to monitor
'into' the switch, which means I would need to mirror every single
port on the switch.
I am worried about this causing serious performance problems on the
Does anyone have any experience with this sort of setup?
(The HP Procurve has about 120 Gigabit ports, one or two are doing
150Mb/s - the rest
5 to 10)
Thanks in advance,
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
-----END PGP SIGNATURE-----