Sensor settings in the Ossim system

sensor settings are particularly important, and the specific settings are similar to sniffer , many people have been has been installed sniffing Device , this approach is not as simple as a host access network in a large network. As a network manager, you should be aware of the specifics of the network environment you are managing . the network topology for an enterprise is shown in 2-2 .

650) this.width=650; "title=" 8-21-1.jpg "alt=" wkiom1xwxutgwopraah_zxsabpo743.jpg "src=" http://s3.51cto.com/wyfs02/ M01/71/b2/wkiom1xwxutgwopraah_zxsabpo743.jpg "/>

Figure 2-2 How to choose the location of the sniffer

The following is a discussion of sniffer methods in switched networks and routed networks.

1. switched networks

in a switched network , using port mirroring is the easiest way to capture traffic, but the switch you are using must support port mirroring ( Port Mirroring ) feature, and there is an idle port that can be plugged into the sniffer. Most mid-range switches support port mirroring, but with varying levels of support.

Support SPAN of equipment:

Tp-link Common mirror-capable switches have Tplink sf2005 5 Port Mirror Switch

Tp-link 2428WEB Port-managed mirror Switch

Cisco ws-c6509 , ws-c4006 , ws-c3750g-24t-e , Ws-c3550-48emi , Ws-c2950g-24-ei Huawei s2008/s2016/s2026/s2403h/s3026 Port mirroring is supported .

650) this.width=650; "title=" 8-21-2.jpg "alt=" wkiol1xwyqpa2r4laafg0-d0cuk917.jpg "src=" http://s3.51cto.com/wyfs02/ M02/71/ae/wkiol1xwyqpa2r4laafg0-d0cuk917.jpg "/>

Figure 2-3 in a switched network Sensor Deployment

2. Routing Network Sniffer setup problem, you can refer to my new book published this year.

This article is from the "Lee Chenguang Original Technology blog" blog, please be sure to keep this source http://chenguang.blog.51cto.com/350944/1686843

Sensor settings in the Ossim system