Re: Looking for a portable sniffing-friendly hub/switch

["Oldcommguy - Tim" <oldcommguy () bellsouth net>]

If you are serious about network monitoring and analysis - Get a TAP...

 

Otherwise every packet you see has been modified in time, all bad packets
have been dropped as well as short or long ones, so baseline studies and
timing studies are not available with a switch.

 

One pays thousands if not millions for a network.even in your home - use a
TAP or it is just not real !

 

Saw 2 0r 3 on Ebay.just do not waste the money on a switch unless you
understand what it is doing to the data/packets.

 

Good luck.

 

 

Tim O'Neill  - The "OldcommguyT"

B.T. Solutions, Inc.

Phone - 770-640-0809

Website - www.lovemytool.com <http://www.lovemytool.com/> 

e-mail - Tim () oldcommguy com

Please honor and support our Troops, Law Enforcement and First Responders!

All Gave Some - Some Gave All!

 

 

From: wireshark-users-bounces () wireshark org
[mailto:wireshark-users-bounces () wireshark org] On Behalf Of Jake Peavy
Sent: Friday, April 09, 2010 8:25 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Looking for a portable sniffing-friendly
hub/switch

 

On Thu, Apr 8, 2010 at 6:17 AM, RUOFF, LARS (LARS)** CTR **
<lars.ruoff () alcatel-lucent com> wrote:

Hi,
i was looking for a "portable" (i.e.reasonably small and lightweight)
solution of a capture-capable hub/switch on the wiki pages:
http://wiki.wireshark.org/HubReference
http://wiki.wireshark.org/SwitchReference
But found out that most of the stuff is either not for sale any more (the
hubs) or does not fulfill the "portable" requirement (the managable
switches).

During my following web search, i stumbled upon the Netgear GS105E:
http://www.netgear.com/Products/Switches/PlusSwitches/GS105E.aspx
which seems to be the perfect fit in terms of size/prize/functions.
It is in fact a mini-switch that can do port-mirroring according to the
specs.

The question i have is if anybody already tested this device and can confirm
the port mirroring capabilities. Especially i wanted to know if it is
possible to mirror outbound only, so as not to disturb the host network.

Second question is if anybody can recommend another similar device of
equivalent price (around 50 EUR)?
Gigabit is a must, PoE would be nice to have too, but i don't expect it
within that price range.


We use a Cisco 8-port managed GigE switch which supports port mirror (and
can be PoE powered if that's interesting to you).  It's worked great for us.

SLM-2008: https://www.cisco.com/en/US/products/ps9996/index.html

-- 
-jp

Any man, in the right situation, is capable of murder. But not any man is
capable of being a good camper. So, murder and camping are not as similar as
you might think. 

deepthoughtsbyjackhandey.com

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe