Home page logo
/

basics logo Security Basics mailing list archives

RE: Port mirroring across multiple switches
From: "Hasnain Atique" <hatique () hasnains com>
Date: Fri, 5 Dec 2003 12:16:29 +0800


The switches in question aren't Cisco. So RSPAN isn't quite the
solution.


-----Original Message-----
From: Peter Schawacker [mailto:peter () schawacker com] 
Sent: Friday, December 05, 2003 6:56 AM
To: Hasnain Atique
Cc: security-basics () securityfocus com
Subject: Re: Port mirroring across multiple switches


RSPAN will do what you need if your switches support it.  See 
http://www.cisco.com/en/US/products/hw/switches/ps708/products
_configuration_guide_chapter09186a0080121d34.html.

Peter


----- Original Message ----- 
From: "Hasnain Atique" <hatique () hasnains com>
To: <security-basics () securityfocus com>
Sent: Thursday, December 04, 2003 2:23 AM
Subject: Port mirroring across multiple switches



What's the best approach to port mirror traffic from multiple 
switches? Should I enable mirroring on one port of each switch, and 
then connect those ports to a hub and put my sniffer on the 
same hub?

My ultimate objective is to collect ARP query information from all 
switches.

Thanks.

-- H



----------------------------------------------------------------------
----
-

----------------------------------------------------------------------
----
--




---------------------------------------------------------------------------
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]