On switched Ethernet that is all that you are likely to see. You'll
need to look into your switch's ability to mirror or monitor ports. On
Cisco switches this is referred to as the Switched Port Analyzer feature
or SPAN. Typically what one does is configure the switch to copy the
traffic from a particular port, set of ports, or VLAN to a target port
where the sniffer is attached. You will most likely want to remove that
configuration when you are done sniffing as there may be performance
issues with leaving this running.
If you are using Cisco equipment, the following link may be a usefull
starting point:
http://www.cisco.com/warp/public/473/41.html
Regards,
Aron
Mike Treas wrote:
Greetings,
Please forgive the ignorance of this question.
Q. On our Company LAN I have our firewall-Proxy and my Linux box (running
ethereal) on the same switch. I would like the ability to capture all
traffic going to and from my gateway and firewall-proxy server. How do
accomplish this? The only traffic I capture is data running to and from my
linux box.
Any help would be great.
Thanks,
Mike Treas
mtreas@xxxxxxxxxxxxxxxxxxxx
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
--
Aron J. Silverton
Senior Research Engineer
Motorola Laboratories, Networks and Infrastructure Research
Motorola, Inc.
Telephone: 847-576-8747
Fax: 847-576-3420
Pager: 800-759-8888 PIN 1147344
mailto: Aron.J.Silverton@xxxxxxxxxxxx
