<!doctype html>
<html>
 <head> 
  <meta charset="UTF-8"> 
 </head>
 <body>
  <div>
   Hello Yudhi
  </div>
  <div>
   <br>
  </div>
  <div>
   What’s the make and model of your switch?
  </div>
  <div>
   Does it have the span or mirror port feature?
  </div>
  <div>
   <br>
  </div>
  <div>
   Amar
  </div>
  <blockquote type="cite">
   <div>
    On April 11, 2020 1:16 AM yudhi ardiyanto <yudhi.ardiyanto@gmail.com> wrote:
   </div>
   <div>
    <br>
   </div>
   <div>
    <br>
   </div>
   <div>
    <div dir="auto">
     This is my network topology
     <div>
      <img style="max-width: 100%;" src="cid:17167aab878ec4b4e6b1">
     </div>
    </div>
   </div>
   <div>
    <br>
    <div class="gmail_quote">
     <div class="gmail_attr" dir="ltr">
      On Thu, 9 Apr 2020 at 23.15 Amar Rathore - CounterSnipe Systems <
      <a href="mailto:amar@countersnipe.com">amar@countersnipe.com</a>> wrote:
      <br>
     </div>
     <blockquote>
      <u></u>
      <div>
       <div>
        Victor, my dear friend,
       </div>
       <div>
        I was just trying to be helpful.
       </div>
       <div>
        I feel well reprimanded. 
       </div>
       <div>
        Apologies 
       </div>
      </div>
      <div>
       <div>
        Amar
       </div>
       <div>
        <br>
       </div>
       <blockquote type="cite">
        <div>
         On April 9, 2020 7:13 AM Victor Julien < 
         <a target="_blank" href="mailto:lists@inliniac.net" rel="noopener">lists@inliniac.net</a>> wrote:
        </div>
        <div>
         <br>
        </div>
        <div>
         <br>
        </div>
        <div>
         Amar, as you very well know we want to keep this list free of commercial
        </div>
        <div>
         advertisements. Please make sure to avoid doing this again.
        </div>
        <div>
         <br>
        </div>
        <div>
         Regards,
        </div>
        <div>
         Victor
        </div>
        <div>
         <br>
        </div>
        <div>
         On 09-04-2020 12:26, Amar Rathore - CounterSnipe Systems wrote:
        </div>
        <blockquote type="cite">
         <div>
          If it was a Suricata related issue, you would have no alerts at all.
         </div>
         <div>
          Therefore it has to be to do with your network. You probably have
         </div>
         <div>
          all systems plugged into a switch with no
         </div>
         <div>
          span/mirror port configuration!
         </div>
         <div>
          Anyway, happy to help further....in fact happy to let you have
         </div>
         <div>
          CointerSnipe for free....you will get
         </div>
         <div>
          the power of Suri plus rule, asset, event management for
         </div>
         <div>
          free....normally costs a lot of money
         </div>
         <div>
          here is the link if interested 
         </div>
        </blockquote>
        <div>
         <br>
        </div>
        <div>
         <br>
        </div>
        <div>
         <br>
        </div>
        <div>
         --
        </div>
        <div>
         ---------------------------------------------
        </div>
        <div>
         Victor Julien
        </div>
        <div>
         <a target="_blank" href="http://www.inliniac.net/" rel="noopener">http://www.inliniac.net/</a>
        </div>
        <div>
         PGP: 
         <a target="_blank" href="http://www.inliniac.net/victorjulien.asc" rel="noopener">http://www.inliniac.net/victorjulien.asc</a>
        </div>
        <div>
         ---------------------------------------------
        </div>
        <div>
         <br>
        </div>
        <div>
         _______________________________________________
        </div>
        <div>
         Suricata IDS Users mailing list: 
         <a target="_blank" href="mailto:oisf-users@openinfosecfoundation.org" rel="noopener">oisf-users@openinfosecfoundation.org</a>
        </div>
        <div>
         Site: 
         <a target="_blank" href="http://suricata-ids.org" rel="noopener">http://suricata-ids.org</a> | Support: 
         <a target="_blank" href="http://suricata-ids.org/support/" rel="noopener">http://suricata-ids.org/support/</a>
        </div>
        <div>
         List: 
         <a target="_blank" href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noopener">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a>
        </div>
        <div>
         <br>
        </div>
        <div>
         Conference: 
         <a target="_blank" href="https://suricon.net" rel="noopener">https://suricon.net</a>
        </div>
        <div>
         Trainings: 
         <a target="_blank" href="https://suricata-ids.org/training/" rel="noopener">https://suricata-ids.org/training/</a>
        </div>
       </blockquote>
      </div>_______________________________________________
      <br>Suricata IDS Users mailing list: 
      <a target="_blank" href="mailto:oisf-users@openinfosecfoundation.org" rel="noopener">oisf-users@openinfosecfoundation.org</a>
      <br>Site: 
      <a target="_blank" href="http://suricata-ids.org" rel="noopener">http://suricata-ids.org</a> | Support: 
      <a target="_blank" href="http://suricata-ids.org/support/" rel="noopener">http://suricata-ids.org/support/</a>
      <br>List: 
      <a target="_blank" href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noopener">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a>
      <br>
      <br>Conference: 
      <a target="_blank" href="https://suricon.net" rel="noopener">https://suricon.net</a>
      <br>Trainings: 
      <a target="_blank" href="https://suricata-ids.org/training/" rel="noopener">https://suricata-ids.org/training/</a>
     </blockquote>
    </div>
   </div>
  </blockquote> 
 </body>
</html>