Home page logo
/

basics logo Security Basics mailing list archives

RE: Port mirroring across multiple switches
From: "Tim" <sftim () timmah tcmkt net>
Date: Fri, 5 Dec 2003 09:19:32 -0600

 I wouldn't do that.  You'll run into layer 2 loop issues I'm thinking.
You'll see some especially nasty stuff if you have spanning tree on.

-Tim

-----Original Message-----
From: Hasnain Atique [mailto:hatique () hasnains com] 
Sent: Thursday, December 04, 2003 4:23 AM
To: security-basics () securityfocus com
Subject: Port mirroring across multiple switches


What's the best approach to port mirror traffic from multiple switches?
Should I enable mirroring on one port of each switch, and then connect
those ports to a hub and put my sniffer on the same hub? 

My ultimate objective is to collect ARP query information from all
switches. 

Thanks.

-- H


---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault