IT Employment

Ask something
Discussion Locked

Protocol anaylizer on switched network?

0 helpful
1 reply

by truwarrior22

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We removed our hubs and installed gigabit switches. All the servers (3 servers) are plugged into the core router which the access level switches also uplink to.

What would be the best way to scan for viruses like symptoms and troubleshoot network issues? The switches are manageable but don?t give much detail. Where not enabling vlans or anything special.

I was looking into ethereal because it?s free. Is this a pretty decent tool? Where would I need to plug into to diag the network!?

Thanks for any links/info for this environment!

1 reply

by choppit

I don't have a vast amount of experience with protocol analysers in general, but I've used ethereal/tethereal for a number of years for troubleshooting and education. My preferred method is to set up a Roving Analysis port/Mirrored port and connect to a dedicated NIC in the monitoring PC. If I can't do this or its a temporary requirement I keep a small 10/100 hub with me.

If you're going to be using ethereal regularly ,familiarity with regular expressions would definitely be advantageous.

This discussion is closed to new replies.