<div><div dir="auto">Dear Amar</div></div><div dir="auto"><br></div><div dir="auto">I used hub to real network<br></div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, 12 Apr 2020 at 21.21 Amar Rathore - CounterSnipe Systems <<a href="mailto:amar@countersnipe.com">amar@countersnipe.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><u></u>
<div>
<div>
Hello Yudhi
</div>
<div>
<br>
</div>
<div>
What’s the make and model of your switch?
</div>
<div>
Does it have the span or mirror port feature?
</div></div><div>
<div>
<br>
</div>
<div>
Amar
</div>
<blockquote type="cite">
<div>
On April 11, 2020 1:16 AM yudhi ardiyanto <<a href="mailto:yudhi.ardiyanto@gmail.com" target="_blank">yudhi.ardiyanto@gmail.com</a>> wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
<div dir="auto">
This is my network topology
<div>
<img src="cid:17170703bd6ec4b4e6b1" style="width:667px;max-width:100%">
</div>
</div>
</div>
<div>
<br>
<div class="gmail_quote">
<div class="gmail_attr" dir="ltr">
On Thu, 9 Apr 2020 at 23.15 Amar Rathore - CounterSnipe Systems <
<a href="mailto:amar@countersnipe.com" target="_blank">amar@countersnipe.com</a>> wrote:
<br>
</div>
<blockquote>
<u></u>
<div>
<div>
Victor, my dear friend,
</div>
<div>
I was just trying to be helpful.
</div>
<div>
I feel well reprimanded.
</div>
<div>
Apologies
</div>
</div>
<div>
<div>
Amar
</div>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On April 9, 2020 7:13 AM Victor Julien <
<a href="mailto:lists@inliniac.net" rel="noopener" target="_blank">lists@inliniac.net</a>> wrote:
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
Amar, as you very well know we want to keep this list free of commercial
</div>
<div>
advertisements. Please make sure to avoid doing this again.
</div>
<div>
<br>
</div>
<div>
Regards,
</div>
<div>
Victor
</div>
<div>
<br>
</div>
<div>
On 09-04-2020 12:26, Amar Rathore - CounterSnipe Systems wrote:
</div>
<blockquote type="cite">
<div>
If it was a Suricata related issue, you would have no alerts at all.
</div>
<div>
Therefore it has to be to do with your network. You probably have
</div>
<div>
all systems plugged into a switch with no
</div>
<div>
span/mirror port configuration!
</div>
<div>
Anyway, happy to help further....in fact happy to let you have
</div>
<div>
CointerSnipe for free....you will get
</div>
<div>
the power of Suri plus rule, asset, event management for
</div>
<div>
free....normally costs a lot of money
</div>
<div>
here is the link if interested
</div>
</blockquote>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
<br>
</div>
<div>
--
</div>
<div>
---------------------------------------------
</div>
<div>
Victor Julien
</div>
<div>
<a href="http://www.inliniac.net/" rel="noopener" target="_blank">http://www.inliniac.net/</a>
</div>
<div>
PGP:
<a href="http://www.inliniac.net/victorjulien.asc" rel="noopener" target="_blank">http://www.inliniac.net/victorjulien.asc</a>
</div>
<div>
---------------------------------------------
</div>
<div>
<br>
</div>
<div>
_______________________________________________
</div>
<div>
Suricata IDS Users mailing list:
<a href="mailto:oisf-users@openinfosecfoundation.org" rel="noopener" target="_blank">oisf-users@openinfosecfoundation.org</a>
</div>
<div>
Site:
<a href="http://suricata-ids.org" rel="noopener" target="_blank">http://suricata-ids.org</a> | Support:
<a href="http://suricata-ids.org/support/" rel="noopener" target="_blank">http://suricata-ids.org/support/</a>
</div>
<div>
List:
<a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noopener" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a>
</div>
<div>
<br>
</div>
<div>
Conference:
<a href="https://suricon.net" rel="noopener" target="_blank">https://suricon.net</a>
</div>
<div>
Trainings:
<a href="https://suricata-ids.org/training/" rel="noopener" target="_blank">https://suricata-ids.org/training/</a>
</div>
</blockquote>
</div>_______________________________________________
<br>Suricata IDS Users mailing list:
<a href="mailto:oisf-users@openinfosecfoundation.org" rel="noopener" target="_blank">oisf-users@openinfosecfoundation.org</a>
<br>Site:
<a href="http://suricata-ids.org" rel="noopener" target="_blank">http://suricata-ids.org</a> | Support:
<a href="http://suricata-ids.org/support/" rel="noopener" target="_blank">http://suricata-ids.org/support/</a>
<br>List:
<a href="https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users" rel="noopener" target="_blank">https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users</a>
<br>
<br>Conference:
<a href="https://suricon.net" rel="noopener" target="_blank">https://suricon.net</a>
<br>Trainings:
<a href="https://suricata-ids.org/training/" rel="noopener" target="_blank">https://suricata-ids.org/training/</a>
</blockquote>
</div>
</div>
</blockquote>
</div>
</blockquote></div></div>