[windows2000] Re: Sniffing
- From: "Timothy Mangan" <tmangan@xxxxxxxxxxxx>
- To: <windows2000@xxxxxxxxxxxxx>
- Date: Thu, 22 Jan 2004 10:29:30 -0500
The sniffer on hub would see any packets on the link it is attached to.
This means traffic both from and to the target device (the PC in the
original question, or the firewall as suggested by Mark Lee).
If you configure the switch instead, whether you need to be on a "special
port" may be switch dependent - I'm not sure. You have to RTFM (which is
why the hub solution is appealing. Who wants to R, let alone try to find
the M?)
Timothy R. Mangan - Founder, TMurgent Technologies
tmangan@xxxxxxxxxxxx www.tmurgent.com (+1)781.492.0403
_____
From: windows2000-bounce@xxxxxxxxxxxxx
[mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Brian Lilley
Sent: Thursday, January 22, 2004 8:54 AM
To: 'windows2000@xxxxxxxxxxxxx'
Subject: [windows2000] Re: Sniffing
Therefore a sniffer on any port of that hub will only see frames destined
for MAC addresses on that Hub as the switch will only forward frames out of
the switchport the hub is plugged into when it has frames only for devices
on that hub.
I understand that there is a configuration that can be done on switches to
forward all frames out of a specific port. I'm not sure if you need to be on
a 'special port' or not?
Other related posts:
