Later
steve
>From: Robert Padjen <[EMAIL PROTECTED]>
>Reply-To: Robert Padjen <[EMAIL PROTECTED]>
>To: "The.rock" <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
>Subject: Re: Whew! Can you smell that VLan?
>Date: Thu, 22 Mar 2001 09:06:30 -0800 (PST)
>
I cannot speak to the 3500 series, but in the Cat
5000/6000 line, you span a port to either copy the
contents of a port or an entire VLAN. The membership
of the port that has the Sniffer is moot in this
instance. It is further possible, although I can't
think of too many good reasons to do this, t
Hi
You can use the set span command to mirror the traffic of the desired ports
to a particular port
Arun
""The.rock"" <[EMAIL PROTECTED]> wrote in message
99c060$vl9$[EMAIL PROTECTED]">news:99c060$vl9$[EMAIL PROTECTED]...
> I believe that the 3500 Catalyst series will even let you monitor ports o
I believe that the 3500 Catalyst series will even let you monitor ports on
other switches if you want. Check into it, but I think you can.
""NetEng"" <[EMAIL PROTECTED]> wrote in message
99bbkk$p8a$[EMAIL PROTECTED]">news:99bbkk$p8a$[EMAIL PROTECTED]...
> We have had a pissing match lately and he
Well I have a bunch of 3548's and you can monitor whatever you please.
First figure what port is going to do the monitoring. From that =
interface issue the "port monitor" montior command along with the =
interface your wanting to capture packets from.
port monitor fastEthernet 0/3
=20
and type
Hi,
Be careful trying to sniff all packets you can come unglued.
eg, I have a sinffer with a 100Meg card and a switch set to span say 6 ports capable
of 100Meg. All 6 ports talk at the same time simple maths tells me that is 600Meg. I
will drop a bundle of packets to my sniffer. This can ca
By default, when you plug a Sniffer into a switch you will only see
broadcast traffic for the VLAN that the physical port you are plugged into
is a member of. You are however able to "span" ports or VLANs. That is,
you are able to "span" an entire VLAN or individual ports to a "monitor"
port.
T
Keep in mind that a VLAN is just a broadcast domain. With a packet capture tool, you
capture whatever traffic happens to pop out the port your connected to. Connected
directly to a layer 2 switch (bridge) you will see all the broadcast/multicast traffic
in the VLAN.
*** REPLY SEPAR
You're both right. Normally plugged into the switch you only see traffic
passing through the port on the switch you're on.
HOWEVER, you can plug into most switches with a special configuration that
allows a workstation to sniff all packets on that switch. It requires 2
NICs configured in a spec
Right and wrong.
The IS VLAN is its own broadcast domain and the HR VLAN is its own broadcast
domain. By simply hooking up a sniffer to the HR VLAN, you would not see
any of the traffic that only transgresses the IS VLAN. If someone from the
IS VLAN is going to a device on the HR VLAN, then you
10 matches
Mail list logo
