imagine a tap like a vampire, putting his teeth into the stream to suck it out.
by the way , if you don't want to setup ( or even worse buy ) a switch to span out
the traffic use a 10$ 3-5port hub instead. You may have some collisions on the way
but it never caused any real problems or performance disadvantages.
And I strongly recommend to use read-only network cables. You can't buy these
so google for "IDS Read Only Cable" and sooner or later you'll find what I mean.
I gives your IDS a much better security combined with an interface without any IP
listening in promiscous mode.

-----Ursprüngliche Nachricht-----
Von: sai [mailto:sonicsai at gmail dot com]
Gesendet: Donnerstag, 18. August 2005 08:32
An: Michael Sierchio
Cc: m0n0wall at lists dot m0n0 dot ch
Betreff: [m0n0wall] Re: m0n0wall / span port


what do you mean 'tap'? Please explain..

sai

On 8/18/05, Michael Sierchio <kudzu at tenebras dot com> wrote:
> Daniele Guazzoni wrote:
> > Put an additional port, connect your IDS and bridge it to WAN...
> > But as chris already said, use a switch instead and you will have a lot 
> > less problems !
> 
> Don't bridge, and a switch is overkill.  Use a tap.
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 
>

---------------------------------------------------------------------
To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch