I've been asked to install a fiber network tap to monitor traffic to a suricata box in our infrastructure. I've never installed one of these before and I'm not clear on how specifically it works. The flex tap I have is a 100 Gigabit Flex Tap LC Type, LR Singlemode 70/30 split ratio. I'm unclear on a few points around installation.
-
I assume the monitor box itself would need two transceivers because the network would only be sending receive and not send. Is that true?
-
What kind of cable am I using to go from the two RX on the tap to the transceivers on the monitor box? Will two separate simplex cables work?
-
How does a link work with just a receive in a transceiver? Will it see it as a link? I thought you needed both to establish a link? Will my intel transceivers see this as an active link and allow linux to get those packets?
Thank you and sorry if these are dumb questions. First time using a network tap and their documentation is somewhat lacking.
No comments:
Post a Comment