Well I have a bunch of 3548's and you can monitor whatever you please.
First figure what port is going to do the monitoring. From that =
interface issue the "port monitor" montior command along with the =
interface your wanting to capture packets from.
port monitor fastEthernet 0/3
=20
and type it in again for another port to monitor. If you don't specify =
the interface to monitor it will monitor all the interfaces for the same =
VLAN.=20
""NetEng"" <[EMAIL PROTECTED]> wrote in message =
99bbkk$p8a$[EMAIL PROTECTED]">news:99bbkk$p8a$[EMAIL PROTECTED]...
> We have had a pissing match lately and here's the details. One person =
states
> that a VLan can not be sniffed because it is on a different subnet. =
The
> other person says it can becuase it's physically on the same switch. I =
think
> you can to a point. Here's what I mean; let's say we have a 3524 with =
two
> Vlans, VLAN1 (we'll call it InfoSys), and VLAN2 (called HR). If I have =
a
> sniffer running on InfoSys, I should be able to sniff traffic on my =
subnet
> as well as traffic from HR to InfoSys (ie HR employee accessing mail =
server
> on InfoSys), right? The only difference is that the source MAC address =
would
> change. I should not be able to sniff traffic local to HR (ie an =
employee
> accessing accounting software) right? What's the rub?
>=20
>=20
>=20
>=20
> _________________________________
> FAQ, list archives, and subscription info: =
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>=20
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
