Home page logo

basics logo Security Basics mailing list archives

RE: Port mirroring across multiple switches
From: "Hasnain Atique" <hatique () hasnains com>
Date: Fri, 5 Dec 2003 12:16:29 +0800

The switches in question aren't Cisco. So RSPAN isn't quite the

-----Original Message-----
From: Peter Schawacker [mailto:peter () schawacker com] 
Sent: Friday, December 05, 2003 6:56 AM
To: Hasnain Atique
Cc: security-basics () securityfocus com
Subject: Re: Port mirroring across multiple switches

RSPAN will do what you need if your switches support it.  See 


----- Original Message ----- 
From: "Hasnain Atique" <hatique () hasnains com>
To: <security-basics () securityfocus com>
Sent: Thursday, December 04, 2003 2:23 AM
Subject: Port mirroring across multiple switches

What's the best approach to port mirror traffic from multiple 
switches? Should I enable mirroring on one port of each switch, and 
then connect those ports to a hub and put my sniffer on the 
same hub?

My ultimate objective is to collect ARP query information from all 


-- H




  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]