On Tue, 2004-11-23 at 15:06 -0500, Alex Evonosky wrote: > Matthew Miller wrote: > > >>Ethereal can capture that just fine in promisc mode... > > > > > > But, if it's a switched network, you'll need to actually be somewhere in the > > path his packets are travelling. > > > > not unless you have access to the switch and issue a spanning-tree > session.. Then you can monitor ANY port on that switch. If you can't port-mirror (span tree, SNAP, etc), simply putting a hub inline (say, off the inside interface of your firewall...) and plugging your sniffer into that hub would work nicely. -- Be big. Be meaty. Be Frank.
Attachment:
signature.asc
Description: This is a digitally signed message part
