I'm looking into configuring port mirroring on my trial version of AlienVault. I'm using a VMware VM version of the sensor for my configuration.
I've also configured the SPAN ports based on what I saw in the AlienVault Documentation.
The documentation is very high level but I don't really understand how the sensor is collecting data from my switch or if there's additional configuration I need to do.
Specifically, I need to know if I configure my switch to send the mirrored traffic to the port that my VM host is connected to?
Which port should I monitor? What's best practices?
I was wondering if there's anyone out there that could possibly help me with the more deep down configuration of port mirroring with my switch? (Brocade Switch)