[Bro] Network taps for Bro

[Daniel Manzo]

Hi all,

My team is looking into using the Bro IDS for monitoring of a science DMZ with a 10 Gbps network. I was wondering how to choose which network tap(s) is necessary for this type of connection and if you have any recommendations/methods for setting up the hardware for Bro. I have been looking at the passive Ixia Flex taps, specifically the LC 10G SM 50/50 split tap. Will single mode (SM) versus multi-mode (MM) make a difference for Bro? And does Bro require a 50/50 ratio, or would I be able to get away with a different ratio?

Thanks for the help,
Daniel Manzo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160803/f450dca9/attachment.html