I must concur with this gentleman's approach to sniffing WAN traffic. At my previous position I used the HP Internet Advisor product regularly and was very impressed with its abilities. However, the HP Internet Adivsor is costly, at about the price of a small car, one can experience network sniffing nirvana.
One other option to try would be to have your service provider place their own sniffer on the line. Speaking on behalf of ours, MCI, they were able to help us with a traffic shaping dilemma by placing an HP Internet Advisor-like sniffer on the local loop. For this, of course, they require permission from your company's IT management as this does pose some security questions. My 2 cents duly deposited, Raul De La Garza III, CCDP NNCSS MCSE CNE > ---- Original Message ----- > From: "Trevor J Corness" > To: > Sent: Tuesday, October 02, 2001 3:14 PM > Subject: Re: Sniffing Packet From the router. [7:21111] > > > > The only other way that I know of to avoid crashing the router, and > getting > > a > > useful "sniff" of the WAN traffic, is to use a V.35 protocol analyzer, > such > > as the HP Internet Advisor. This is a pricey unit, but if you do this > stuff > > regularly (as my coworkers and I do), it is the easiest, and most > > presentable > > way to do this. Note: There is a short disruption of service while > > inserting > > and removing the V.35 Y-cable used to do this. > > > > Internet Advisor generates some very management-friendly reports, used to > > present findings to people of a slightly more non-technical background. > It > > also has many VERY powerful features (think: SnifferPro-like GUI). > > > > I am sure there are other very similiar products out in the field, I am > only > > explaining what I have used. At the present time, this is only the HP > > Internet Advisor. > > > > Regards, > > Trevor J Corness, CCNA CCDA JNCIS NNCSS MCSE > > Radian Communication Services Corporation > > http://www.radiancorp.com > > > > > > On September 26, 2001 07:20 am, MADMAN wrote: > > > You can easily hedge your bets against crashing the router by using an > > > extended access-list with ip packet debuging. > > > > > > Dave > > > > > > Dennis wrote: > > > > debug ip packet... use with extreme care, you could crash the router > if > > > > you have lots of traffic... > > > > > > > > ""Ken"" wrote in message > > > > [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > > > > > > > > Hi, > > > > > > > > > > Does anyone know how I can sniff packet from a router. Or can the > > > > > router redirect the packet to another Ethernet interface. Like Span > > > > > port on the switch. I need to capture the packet that is going > across > > > > > the WAN > > > > > > > > interface. > > > > > > > > > Thanks. > > > > > > > > > > Ken Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=21724&t=21111 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
