Re: Small Network Setup with Debian Router

[celejar <celejar@gmail.com>]

On 1/30/07, Ron Johnson <ron.l.johnson@cox.net> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 01/30/07 08:31, celejar wrote:
> > On 1/29/07, Peter Teunissen <lists@onemanifest.net> wrote:
> >>
> >> On 29-jan-2007, at 21:57, Kristian Lampen wrote:
> >
> > [snip]
> >
> [snip]
> >> I've read something about using an old non-switching hub
> >> attached to your network and an old cpu, running snort. This
> >> way you should be able to sniff all traffic. Dunno much more
> >> about it tho, never tried it myself.
> >
> > Although I have never used one, AFAIK that is exactly what a hub
> > does; it sends all traffic out all ports. Just be aware that this
> > will greatly increase traffic across all the segments, and may
> > cause collisions. That's why switches have more or less replaced
> > hubs.
>
> More or less?  Does anyone actually sell hubs anymore?

Newegg does [0]. The reviews of one of them imply that the purchasers
wanted it specifically for sniffing their network traffic.

Celejar

[0] http://www.newegg.com/Product/ProductList.asp?N=2050400026+1228013608&Submit=ENE&SubCategory=26