Wireshark-users: Re: [Wireshark-users] Looking for a portable sniffing-friendly hub/switch
From: Jake Peavy <djstunks@xxxxxxxxx>
Date: Fri, 9 Apr 2010 18:25:27 -0600
On Thu, Apr 8, 2010 at 6:17 AM, RUOFF, LARS (LARS)** CTR ** <lars.ruoff@xxxxxxxxxxxxxxxxxx> wrote:
Hi,
i was looking for a "portable" (i.e.reasonably small and lightweight) solution of a capture-capable hub/switch on the wiki pages:
http://wiki.wireshark.org/HubReference
http://wiki.wireshark.org/SwitchReference
But found out that most of the stuff is either not for sale any more (the hubs) or does not fulfill the "portable" requirement (the managable switches).

During my following web search, i stumbled upon the Netgear GS105E:
http://www.netgear.com/Products/Switches/PlusSwitches/GS105E.aspx
which seems to be the perfect fit in terms of size/prize/functions.
It is in fact a mini-switch that can do port-mirroring according to the specs.

The question i have is if anybody already tested this device and can confirm the port mirroring capabilities. Especially i wanted to know if it is possible to mirror outbound only, so as not to disturb the host network.

Second question is if anybody can recommend another similar device of equivalent price (around 50 EUR)?
Gigabit is a must, PoE would be nice to have too, but i don't expect it within that price range.

We use a Cisco 8-port managed GigE switch which supports port mirror (and can be PoE powered if that's interesting to you).  It's worked great for us.

SLM-2008: https://www.cisco.com/en/US/products/ps9996/index.html

--
-jp

Any man, in the right situation, is capable of murder. But not any man is capable of being a good camper. So, murder and camping are not as similar as you might think.

deepthoughtsbyjackhandey.com