Security Basics mailing list archives
RE: Port mirroring across multiple switches
From: "Hasnain Atique" <hatique () hasnains com>
Date: Fri, 5 Dec 2003 12:16:29 +0800
The switches in question aren't Cisco. So RSPAN isn't quite the solution.
-----Original Message----- From: Peter Schawacker [mailto:peter () schawacker com] Sent: Friday, December 05, 2003 6:56 AM To: Hasnain Atique Cc: security-basics () securityfocus com Subject: Re: Port mirroring across multiple switches RSPAN will do what you need if your switches support it. See http://www.cisco.com/en/US/products/hw/switches/ps708/products _configuration_guide_chapter09186a0080121d34.html. Peter ----- Original Message ----- From: "Hasnain Atique" <hatique () hasnains com> To: <security-basics () securityfocus com> Sent: Thursday, December 04, 2003 2:23 AM Subject: Port mirroring across multiple switchesWhat's the best approach to port mirror traffic from multiple switches? Should I enable mirroring on one port of each switch, and then connect those ports to a hub and put my sniffer on thesame hub?My ultimate objective is to collect ARP query information from all switches. Thanks. -- H-------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Port mirroring across multiple switches Hasnain Atique (Dec 04)
- Re: Port mirroring across multiple switches Peter Schawacker (Dec 04)
- RE: Port mirroring across multiple switches Hasnain Atique (Dec 05)
- RE: Port mirroring across multiple switches David Gillett (Dec 05)
- RE: Port mirroring across multiple switches Hasnain Atique (Dec 05)
- RE: Port mirroring across multiple switches Tim (Dec 05)
- <Possible follow-ups>
- RE: Port mirroring across multiple switches Thomson, Stuart A. (Dec 05)
- RE: Port mirroring across multiple switches Hagen, Eric (Dec 05)
- Re: Port mirroring across multiple switches Peter Schawacker (Dec 04)