Re: [gentoo-user] Re: OT:hardware sniffer equipment

2007-12-14 Thread Randy Barlow
James wrote:
 COST is the key factor. Why pay somebody for something, when you can get
 equivalient functionality for very few dollars. A flat hub is all
 I need (want).. With a flat hub and a portable, you can mix in 
 any amount of target software and do many things with a flat but
 and a linux device.
 
 I'd consider an embedded (linux) board with a few ports, if they
 are or can be setup as a flat hub.

This seems like something that you should be able to do with OpenWRT and
a Linksys WRT54Gl...

-- 
Randy Barlow
http://electronsweatshop.com
-- 
[EMAIL PROTECTED] mailing list



[gentoo-user] Re: OT:hardware sniffer equipment

2007-12-14 Thread James
Randy Barlow randy at electronsweatshop.com writes:


  I'd consider an embedded (linux) board with a few ports, if they
  are or can be setup as a flat hub.

 This seems like something that you should be able to do with OpenWRT and
 a Linksys WRT54Gl...


Yep, that device was on the short list. I have to find out the ethernet
chipset it used to determine if they switched (most) likely or not
and if they are switched whether one can be setup up to sniff.

I'm just not that familiar with the wrt54g other than what I have read
casually.


Have you set one up to sniff and remotely display the result on a workstaion
before?


James



-- 
[EMAIL PROTECTED] mailing list



Re: [gentoo-user] Re: OT:hardware sniffer equipment

2007-12-14 Thread Randy Barlow
James wrote:
 Have you set one up to sniff and remotely display the result on a workstaion
 before?

No, I definitely haven't done anything like that.  Mine is just a
router/WAP/firewall/QoS thing with some fun port forwarding rules.
Funny that it's default firmware doesn't let you forward outside port
8080 to an inside 80.  I know that the level of mathematical prowess
necessary for such a packet transformation is exceedingly amazing,
but...  OpenWRT is cool :)

What I think you could do in OpenWRT is perhaps to set up an IPTables
Rule that sends all packets through one of it's 5 ports on the back, and
then you could plug a machine in there to log/process it.  This is not
something I have done, it's just a suggestion for you to ponder.  It may
or may not be possible, I don't know...

-- 
Randy Barlow
http://electronsweatshop.com
-- 
[EMAIL PROTECTED] mailing list



Re: [gentoo-user] Re: OT:hardware sniffer equipment

2007-12-14 Thread kashani

James wrote:

COST is the key factor. Why pay somebody for something, when you can get
equivalent functionality for very few dollars. A flat hub is all
I need (want).. With a flat hub and a portable, you can mix in 
any amount of target software and do many things with a flat but

and a linux device.

I'd consider an embedded (linux) board with a few ports, if they
are or can be setup as a flat hub. 


Thanks for your input,


Cost is pretty low these days. $300 for 10/100 24 port with vlans and 
port mirroring.

http://www.dell.com/content/products/productdetails.aspx/pwcnt_3424?c=usl=ens=bsdcs=04

Not sure the throughput you're dealing with, but I had issues with 
anything over 15-20 mb/s being moved down to half duplex. If you're just 
messing about home or in a low bandwidth office this doesn't matter so much.


I've got two 5234's (same thing with GigE and bigger backplane) I'd let 
go for $500 + shipping if you or anyone else is interested. :-)


kashani
--
[EMAIL PROTECTED] mailing list