[Bro] Network tap issues

Azoff, Justin S jazoff at illinois.edu
Wed Jun 21 07:26:49 PDT 2017

> On Jun 21, 2017, at 9:20 AM, Daniel Manzo <daniel.manzo at bayer.com> wrote:
> The connection in port A is coming from Level 3 internet and the connection in port B is going to a network switch. The monitor port

I'm confused on what you mean by "the monitor port".  A passive fiber tap has two rx/tx input ports and two tx only output ports, one for each direction.  

The two outputs need to be connected to the rx ports on two separate NICs, you can't just connect them to a single nic, as you'd be connecting one of the tx ports from the tap to a tx port on the NIC.

- Justin Azoff

More information about the Bro mailing list