HELP WITH SNIFFER PRO [7:56442]
Hi, I have a copy of sniffer pro 4.5 and want to use it to monitor the WAN links. I don't have any WAN hardware for sniffer. Can anyone guide me on how to make the best use of it for monitoring WAN traffic ? Regards Manoj Ghorpade. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56442&t=56442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Re: HELP WITH SNIFFER PRO [7:56442]
You do need a WAN hardware in the Sniffer. LM2000 is one of them, to monitor HDLC/PPP/Frame-Relay. Regards, Alaerte "Manoj Ghorpade" @groupstudy.com em 29/10/2002 08:29:48 Favor responder a "Manoj Ghorpade" Enviado Por: [EMAIL PROTECTED] Para: [EMAIL PROTECTED] cc: Assunto: HELP WITH SNIFFER PRO [7:56442] Hi, I have a copy of sniffer pro 4.5 and want to use it to monitor the WAN links. I don't have any WAN hardware for sniffer. Can anyone guide me on how to make the best use of it for monitoring WAN traffic ? Regards Manoj Ghorpade. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56443&t=56442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: HELP WITH SNIFFER PRO [7:56442]
actually what I do with Sniffer Pro to monitor the WAN (even though I wont see layer 2 stuff which the wan sniffer will see) is I port mirror the Ethernet port where the router plugs into the lan/wan switch to an open port and plug my sniffer in there. hope this helps. -Original Message- From: [EMAIL PROTECTED] [mailto:alaerte@;embratel.com.br] Sent: Tuesday, October 29, 2002 6:47 AM To: [EMAIL PROTECTED] Subject: Re: HELP WITH SNIFFER PRO [7:56442] You do need a WAN hardware in the Sniffer. LM2000 is one of them, to monitor HDLC/PPP/Frame-Relay. Regards, Alaerte "Manoj Ghorpade" @groupstudy.com em 29/10/2002 08:29:48 Favor responder a "Manoj Ghorpade" Enviado Por: [EMAIL PROTECTED] Para: [EMAIL PROTECTED] cc: Assunto: HELP WITH SNIFFER PRO [7:56442] Hi, I have a copy of sniffer pro 4.5 and want to use it to monitor the WAN links. I don't have any WAN hardware for sniffer. Can anyone guide me on how to make the best use of it for monitoring WAN traffic ? Regards Manoj Ghorpade. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56448&t=56442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
RE: HELP WITH SNIFFER PRO [7:56442]
Manoj Ghorpade wrote: > > Hi, > I have a copy of sniffer pro 4.5 and want to use it to monitor > the WAN > links. > I don't have any WAN hardware for sniffer. > Can anyone guide me on how to make the best use of it for > monitoring > WAN traffic ? > I'm assuming you have decided not to go the more obvious route of purchasing a WAN module for your analyzer, probably because those modules are so expensive. Most analyzers support advanced filtering. If you have an idea of which traffic passes across the WAN versus which traffic stays local, you can set up a filter to just look at that traffic. You can even monitor utilization if you do a little arithemetic to take into account that the analyzer will probably base the utilization on the Ethernet bandwidth rather than your actual WAN bandwidth. (Using MRTG and router show commands might be better for this.) If you're concerned that packets are getting dropped on the WAN side, you can study the traffic behavior on the Ethernet sides. Do you see a lot of retransmissions? If your analyzer is placed in the topology in the right position, then you can probably assume that retransmissions are occuring because packets are getting dropped on the WAN link. You can look at the other side of the link too if this is your own network and see if packets are indeed not arriving on the other side. You can also study delay and response time by simply using the Ethernet analyzer. On the other hand, if you want stats on CRC errors on the WAN link, you need a WAN analyzer (or use router show commands). If you want to see Layer 2 WAN packets like LMI or Q.921 or Q.931, you'll need the appropriate WAN module. Likewise, if you want to see WAN headers such as Frame Relay, PPP, etc., you'll need a WAN analyzer. I think it boils down to Howard's question, what problem are you trying to solve? For more specific advice, you may want to read the final chapter in my new book. The chapter is called WAN Troublehsooting for LAN Engineers. You have to buy the whole book to get the chapter though. Sorry about that. ;-) Wouldn't it be nice if books were more modular. Anyway, the book is called Troubleshooting Campus Networks. An Amazon link is: http://www.amazon.com/exec/obidos/ASIN/0471210137/ref%3Dnosim/opendoornetwinc/002-2801204-8784812 Priscilla Oppenheimer > Regards > > Manoj Ghorpade. > > Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=56475&t=56442 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]