Network Sniffer

Have a programer had synchronicity to your instalation...Before doing so communicate with the makers of the "sniffer pro" to know if they will permit derogation to go forth they migth even pay you for the solution.Maybe not in cash...
Or communicate with university people they've been
doing things alike for along time...

Have a programer had synchronicity to your instalation...Before doing so communicate with the makers of the "sniffer pro" to know if they will permit derogation to go forth they migth even pay you for the solution.Maybe not in cash...
Or communicate with university people they've been
doing things alike for along time...

Your switch has to be configured to pass the traffic from the other ports to the port on your connection. This is typically known as port mirroring and is configured within the switch. See your specific manufacturers documentation on enabling port mirroring on your particular switch

Answer 3 is correct, setting up port mirroring is the best solution. You will need to configure/manage your switch for this (how depends on your hardware - you can probably log on to a console port with hyperterm and manage it from there).

An alternative is you can "hub out". Get a small hub and insert it into the network for the sections you want to monitor.

A great website with mountains of examples, details, downloads and reference material
is www.packet-level.com

Hope this helps!

Port mirroring is the correct solution, however this will add overhead and delay to the network, especially if it is a large one. Consider using RMON probes to handle this a little more gracefully than just mirroring an entire VLAN across one port. (I believe you can only mirror one VLAN at a time per switch) Mirroring the port puts the port virtually onto the switches backplane, forcing all traffic on the VLAN to pass through the port before going onto its final destination.

Don't use hubs, as they will increase the traffic and reduce the security on the subnet as each system will be able to broadcast every packet to and from every PC on the network.
That's probably why you went to a switched environment in the first place. Increase the bandwidth, reduce the broadcasts and increase the relative security.

This question was closed by the author