Re: Port Mirroring

If your doing this on a vm in VMware you will want to pass a secondary dedicated Nic thru to that vm and set it for promiscuous mode. Then plug your mirror port from your switch into that Nic.

Thanks,
James
________________________________
From: Snort-users <[email protected]> on behalf of Paul Giovanni <[email protected]>
Sent: Tuesday, March 5, 2024 1:10:54 PM
To: [email protected] <[email protected]>
Subject: [Snort-users] Port Mirroring


All,



I have a managed switch connected to my fire wall that I can port mirror from. However, I’m unsure where to plug the mirrored port in. Do I plug it right into my ESXI host. This host is hosting the VM that’s running snort.



Thanks,



Paul Giovanni​​​​

IT Project Manager

Edison, NJ<https://goo.gl/alXFy5> P: <tel:7329855000> (732) 985-5000<tel:7329855000>

Gloucester City, NJ<https://goo.gl/PgMNnW> P: (856) 212-0050<tel:8562120050>

[cid:[email protected]]<https://www.facebook.com/RaritanGroup/>

[cid:[email protected]]<https://www.instagram.com/raritangroup/>

[cid:[email protected]]<https://www.linkedin.com/company/raritan-group>

[cid:[email protected]]<http://www.raritangroup.com/>

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette