Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] looking to make passive tap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 17 Apr 2005 18:34:27 -0700
Crowe, Graham GP wrote:

I had a similar problem and ended up buying the proper tap. I would
highly recommend it for layer 1 problems (ones which the switch filters
out for you). Within 30 seconds of installing the tap we had figured out
a problem that had been plaguing us for months.

I would be very wary of the cheap version of the tap shown on the
snort page, it breaks the ethernet standard and could seriously degrade
your connection.

You might want to

	1) update the Ethereal Wiki to note this

and

	2) note this to the Snort developers

if the problems aren't theoretical.