RE: Sniffing Async/Serial Ports on the Router [7:54919]

[s vermill]

I've been working on this on and off for a month or so now.  I've got a
steep learning curve when it comes to the internal workings of Windows
machines, so I doubt that I fully appreciate all of the nuances of what I've
discovered.  So far...

Ethereal, a free open-source protocol analyzer, claims to support Cisco
HDLC.  I was in touch with the developers and they informed me that Ethereal
could support ISO HDLC only if WinPcap supports it.  I was next in touch
with the developers of WinPcap, who informed me that WinPcap could support
ISO HDLC only if Windows supports it (i.e. if it is part of NDIS).  Far as I
can tell, it doesn't and it isn't.

Elan Digital Systems, Ltd. makes a PCMCIA card that claims to support ISO
HDLC and comes with it's own drivers.  How to interface those drivers to a
protocol analyzer application is beyond my current know-how.  The WinPcap
folks suggested that if the drivers exported HDLC as an ethernet adapter
it could possibly be made to work.  Elan offered me a 30-day trial period to
try to make something happen.  I'm leaving on another extended business trip
soon, so it'll have to wait I suppose.

In the mean time, I thought I'd share what little I've learned thus far in
hopes that some brilliant individual(s) might have something a little more
insightful to add.  Is there a much easier way to go about this with a Unix
or Linux box?

There are, of course, hardware-based protocol analyzers, such as the Agilent
Advisor, that do a great job of decoding serial protocols.  We bought a few
several years ago.  Seem to recall that they were between $10k and $20k,
depending on options.

Hamid Ali Asgari wrote:
 
 Hi group,
 
 I am looking for a solution to monitor/sniff the traffic on
 Serial/Async
 ports.
 Any suggestions would be appreciated,
 
 Hamid
 
 




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=54932t=54919
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Sniffing Async/Serial Ports on the Router [7:54919]

[Hamid Ali Asgari]

Hi group,

I am looking for a solution to monitor/sniff the traffic on Serial/Async
ports.
Any suggestions would be appreciated,

Hamid




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=54919t=54919
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Re: Sniffing Async/Serial Ports on the Router [7:54919]

[Erick B.]

You can use sniffer with appropiate POD to tap a
Serial line (PPP, HDLC, Frame, etc). This costs $
though. Theres other vendors with similar products
(agilent, etc). 

If your looking to monitor terminal (reverse telnet
like traffic) theres a async monitor command starting
with 12.2(4)T or 8T if I recall. Haven't used it
myself though but you can also sniff this traffic with
a ethernet sniffer as it's telnet and in the clear. 

--- Hamid Ali Asgari  wrote:
 Hi group,
 
 I am looking for a solution to monitor/sniff the
 traffic on Serial/Async
 ports.
 Any suggestions would be appreciated,
 
 Hamid
[EMAIL PROTECTED]


__
Do you Yahoo!?
Faith Hill - Exclusive Performances, Videos  More
http://faith.yahoo.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=54921t=54919
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]