I actually want to see broadcast traffic.
- Original Message -
From: "Charles D Hammonds"
To:
Sent: Tuesday, July 15, 2003 11:57 PM
Subject: RE: Sniffer Recommendation [7:72372]
> span port is not a sniffer requirement, but one of the switch. switches
send
> unicast/m
Nate wrote:
> I actually want to see broadcast traffic.
In that case any analyzer will do. Just connect it to a port in the VLAN
you want the broadcast traffic of.
Regards,
Marco.
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72414
There are various tools to do this, as far as I know they all work based
on the ability to spoof arp replies. Here are a few links:
http://monkey.org/~dugsong/dsniff/
(a host of tools for sniffing through various spoofing attacks)
http://www.phenoelit.de/fr/tools.html
(specifically just for arp
] [mailto:[EMAIL PROTECTED] Behalf Of
Nathan
Sent: Tuesday, July 15, 2003 9:33 PM
To: [EMAIL PROTECTED]
Subject: Sniffer Recommendation [7:72372]
I need a sniffer that doesn't require spanning a port. Any suggestions?
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=7237
Then You need a network without switches. Without the span
port, all unicast frames will only be forwarded to their correct
destination ports.
Your sniffer will not "see" the traffic.
Using RMON/SNMP, its possible to poll some data directly from the switch,
such as statistics, etc. I don't know
I need a sniffer that doesn't require spanning a port. Any suggestions?
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=72372&t=72372
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report
6 matches
Mail list logo
