Re: [CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread Les Mikesell
Neil Aggarwal wrote: >> yeah, a 1gig port can't handle all the traffic from N 1gig >> ports. heck, >> ti can't even handle all the traffic from a single full >> duplex connection > > That is a good point. My traffic is light right now > so I might be able to use it until the traffic grows. W

Re: [CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread Neil Aggarwal
> yeah, a 1gig port can't handle all the traffic from N 1gig > ports. heck, > ti can't even handle all the traffic from a single full > duplex connection That is a good point. My traffic is light right now so I might be able to use it until the traffic grows. Thanks, Neil -- Neil Ag

Re: [CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread nate
Neil Aggarwal wrote: > Are there any pitfalls with this approach? Performance is the biggest one. Port mirroring often involves the CPU, and is really not built for scaling. If your traffic levels are very low it may work fine. Port mirroring is often a low priority task so if the switch is busy

Re: [CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread Larry Brigman
On Fri, Oct 23, 2009 at 9:14 AM, Neil Aggarwal wrote: > Hello everyone: > > I was just reading an ntop guide and it mentioned > many switches have port mirroring. > > According to what I am reading, the Cisco I am using > will copy all traffic to the mirror port.  Then, > I can monitor what is goi

Re: [CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread John R Pierce
Neil Aggarwal wrote: > Hello everyone: > > I was just reading an ntop guide and it mentioned > many switches have port mirroring. > > According to what I am reading, the Cisco I am using > will copy all traffic to the mirror port. Then, > I can monitor what is going on from there. > > That seems l

[CentOS] What about port mirroring? (Was: Switch to measure traffic at IP level)

2009-10-23 Thread Neil Aggarwal
Hello everyone: I was just reading an ntop guide and it mentioned many switches have port mirroring. According to what I am reading, the Cisco I am using will copy all traffic to the mirror port. Then, I can monitor what is going on from there. That seems like a good way to do this. Are there