[OT] HP Procurve Port mirroring and Snort

[Andrew Miehs <andrew@2sheds.de>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Guys,

Thought I'd ask here, as some of you may actually have real life  
experience with running
port mirroring on HP 41xx.

We are looking at running snort (on Debian ^^ ) and wanted to monitor  
as much of our
traffic as possible. Port mirroring on the HPs only seems to monitor  
traffic going
'into' the switch, which means I would need to mirror every single  
port on the switch.

I am worried about this causing serious performance problems on the  
switch.

Does anyone have any experience with this sort of setup?

(The HP Procurve has about 120 Gigabit ports, one or two are doing  
150Mb/s - the rest
5 to 10)

Thanks in advance,

Andrew
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFGdlcyW126qUNSzvURAqz1AJ0YBtSVD4643AGXfOm9+I9uwuvIsACfZ1Kp
3j+2CAJC++H5Kco1bndSP1o=
=8vFe
-----END PGP SIGNATURE-----