Re: how can I setup a network monitoring station

[Rory Campbell-Lange <rory@campbell-lange.net>]

Hi William

On 21/04/02, William Cooper (billcooper@mailandnews.com) wrote:
> ... the reason you are getting only the traffic between the target box
> and switch is because the switch is only supposed to forward traffic
> for that machine. 

Thanks for explaining this. I remember now!

> ... What you need to do is possibly run a 
> trafshow using a machine on the port coming "out" of the switch or get 
> the switch to give you stats on what it is doing for which machine. If 
> that is possible you alone can determine...

I will use either a hub to connect the switch, monitoring station and
router device, or use the switch's port mirroring feature.

Thanks for your help.
Rory
> 
> Rory Campbell-Lange wrote:
> 
> >I have tested tcpdump at another smaller office where I was able to
> >trace all the network traffic between the gateway and workstations all
> >linked on the same small switch. However in the larger office the Bay
> >450-24T (now Nortel) managed switches we use appear to confound tcpdump
> >so that only traffic between the localhost and the targeted system
> >appear, even if I place a mini-hub between the tracing machine and the
> >switch (which also provides the network connection to the router). 

-- 
Rory Campbell-Lange 
<rory@campbell-lange.net>
<www.campbell-lange.net>


-- 
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org