SPAN port on switch need for Websense Network Agent and SNORT IDS

I recently enabled Websense Network Agent using the SPAN port on our switch which is cloning the internal interface on our two firewalls.  Previously, this SPAN port was setup for an instance of a SNORT IDS system.  Is there any way I can use this cloned port for both, or, enable a second SPAN port on a Cisco Catalyst 2950 switch?
tcbgeeksAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cheever000Commented:
I know with the 2950 series it only supports a single SPAN port.  From the configuration document


SPAN Configuration Guidelines

Follow these guidelines when configuring SPAN:

•SPAN is disabled by default.

•Use a network analyzer to monitor ports.

•Only one SPAN sessions can be active on a switch at the same time.

•The destination port cannot be a source port; a source port cannot be a destination port.

•You can have only one destination port.


http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_9_ea1/configuration/guide/swspan.html

You could use a hub/repeater to have the SPAN port double the output to two different locations
tcbgeeksAuthor Commented:
"You could use a hub/repeater to have the SPAN port double the output to two different locations"

I tried an old 3com hub plugged but it didn't detect the physical connection between itself and the 2950.  Any suggestions on a cheap model I could buy that would work?
Cheever000Commented:
I don't actually know if you can connect a hub now that I think about it a SPAN port behaves differently.  The only thing I knew for sure was that the 2950 series can only have a single destination port and only on SPAN session.  I don't have any hubs with which to try to connect to a span port.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
tcbgeeksAuthor Commented:
You were right about the 2950 and a single SPAN session.  I did get the hub to work.  I forgot to hit the switch on the back to set port four to uplink mode so that it would communicate with the catalyst switch.
Cheever000Commented:
Awesome glad to hear it worked for you.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.