Home page logo
/

basics logo Security Basics mailing list archives

Re: Port mirroring across multiple switches
From: "Peter Schawacker" <peter () schawacker com>
Date: Thu, 4 Dec 2003 14:56:07 -0800

RSPAN will do what you need if your switches support it.  See
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configuration_guide_chapter09186a0080121d34.html.

Peter


----- Original Message ----- 
From: "Hasnain Atique" <hatique () hasnains com>
To: <security-basics () securityfocus com>
Sent: Thursday, December 04, 2003 2:23 AM
Subject: Port mirroring across multiple switches



What's the best approach to port mirror traffic from multiple switches?
Should I enable mirroring on one port of each switch, and then connect
those ports to a hub and put my sniffer on the same hub?

My ultimate objective is to collect ARP query information from all
switches.

Thanks.

-- H


--------------------------------------------------------------------------
-
--------------------------------------------------------------------------
--



---------------------------------------------------------------------------
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]