Sensor settings in the Ossim system

Source: Internet
Author: User
Tags ossim

sensor settings are particularly important, and the specific settings are similar to sniffer , many people have been has been installed sniffing Device , this approach is not as simple as a host access network in a large network. As a network manager, you should be aware of the specifics of the network environment you are managing . the network topology for an enterprise is shown in 2-2 .

650) this.width=650; "title=" 8-21-1.jpg "alt=" wkiom1xwxutgwopraah_zxsabpo743.jpg "src=" http://s3.51cto.com/wyfs02/ M01/71/b2/wkiom1xwxutgwopraah_zxsabpo743.jpg "/>

Figure 2-2 How to choose the location of the sniffer

The following is a discussion of sniffer methods in switched networks and routed networks.

1. switched networks

in a switched network , using port mirroring is the easiest way to capture traffic, but the switch you are using must support port mirroring ( Port Mirroring ) feature, and there is an idle port that can be plugged into the sniffer. Most mid-range switches support port mirroring, but with varying levels of support.

Support SPAN of equipment:

Tp-link Common mirror-capable switches have Tplink sf2005 5 Port Mirror Switch

Tp-link 2428WEB Port-managed mirror Switch

Cisco ws-c6509 , ws-c4006 , ws-c3750g-24t-e , Ws-c3550-48emi , Ws-c2950g-24-ei Huawei s2008/s2016/s2026/s2403h/s3026 Port mirroring is supported .

650) this.width=650; "title=" 8-21-2.jpg "alt=" wkiol1xwyqpa2r4laafg0-d0cuk917.jpg "src=" http://s3.51cto.com/wyfs02/ M02/71/ae/wkiol1xwyqpa2r4laafg0-d0cuk917.jpg "/>

Figure 2-3 in a switched network Sensor Deployment

2. Routing Network Sniffer setup problem, you can refer to my new book published this year.

This article is from the "Lee Chenguang Original Technology blog" blog, please be sure to keep this source http://chenguang.blog.51cto.com/350944/1686843

Sensor settings in the Ossim system

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.