[Bro] Network tap issues
daniel.manzo at bayer.com
Wed Jun 21 07:07:18 PDT 2017
Thanks for the response! Unfortunately, we have tried that, but still no luck. I’m not sure what else could be wrong.
From: Mark Buchanan [mailto:mabuchan at gmail.com]
Sent: Wednesday, June 21, 2017 9:46 AM
To: Daniel Manzo
Subject: Re: [Bro] Network tap issues
Flip both TX and RX around. The tap is in "backwards" meaning the light is not flowing the right direction to hit the optical splitter and get to your sensor. It as acting more as a "combiner", which could be bad if someone pushes light from your tap to the circuit.
On Jun 21, 2017, at 07:20, Daniel Manzo <daniel.manzo at bayer.com<mailto:daniel.manzo at bayer.com>> wrote:
I have Bro 2.5 configured on a RHEL 7.3 server and have a network tap question, which I know isn’t totally Bro related, but I figured the Bro community would be able to advise. The tap I have is a passive fiber tap (OM3/4, 850mm, 50/50) enabled for up to 10Gb throughput. The connection in port A is coming from Level 3 internet and the connection in port B is going to a network switch. The monitor port is connected to my Bro server. The problem is that I am seeing no traffic at all coming from the monitor, and the light on the server NIC doesn’t even light up. However, I am still able to access the internet from my server, despite receiving no traffic from the monitor. Basically the connection from A to B works, but the monitor is not mirroring traffic. We have tested the tap before in other areas of our network, and it was working, so I’m not sure why it is not working in this location. Any and all help is appreciated!
Bro mailing list
bro at bro-ids.org<mailto:bro at bro-ids.org>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro