Wireshark mailing list archives

Re: One NIC on public side


From: "mike () grounded net" <mike () grounded net>
Date: Wed, 19 May 2010 14:05:38 -0500

BTW, while I've seen replies on my original question, I'm still hazy on how safe it is to do what I'd like to.

Here is what it looks like.

WAN
 |
Switch (On the public side - This was a hub)
 |
Firewall
 |
Core Switch--Lan side Switches off of multiple firewall interfaces
 |
Server with two Nics running wireshark on it
Nic0 connected inside LAN
Nic1 connected to first switch before firewall

It was suggested that I take all protocols off of Nic1 which would make it safe to have on the public side.
At the time, I was connecting to a hub before the firewall. At the moment, I am connected to the core switch and am 
using port mirroring. 
What I would like to do is to have Nic1 connected to the public side switch, which would have port mirroring. 
I ordered a new switch to replace the hub so should have this setup in a few days.

What I'm looking for is input on just how safe this setup is.


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: